Consumer lender TMX discloses data breach impacting 4.8 million people

[vtqhtr413]

Content source

https://www.bleepingcomputer.com/news/security/consumer-lender-tmx-discloses-data-breach-impacting-48-million-people/

TMX Finance and its subsidiaries TitleMax, TitleBucks, and InstaLoan have collectively disclosed a data breach that exposed the personal data of 4,822,580 customers. TMX is a public financial service that operates equities, fixed income, derivatives, and energy markets exchanges, with a business presence in the United States, Canada, the U.K., Australia, and China. TitleMax is a lending business operating 1,100 stores across the U.S., TitleBucks is a car title loans service, and InstaLoan is a fast-approval personal loan service for those with bad credit. In a data breach notification letter sent yesterday to impacted individuals, the Canadian finance giant informs that hackers breached its systems in early December 2022 but did not detect the breach until February 13th, 2023.

TMX says that the following customer data was exposed during the security breach:

• Full name
• Date of birth
• Passport number
• Driver’s license number
• Federal/state identification card number
• Tax identification number
• Social security number
• Financial account information
• Phone number
• Physical address
• Email address