{"id":494,"date":"2023-04-09T07:35:36","date_gmt":"2023-04-09T12:35:36","guid":{"rendered":"https:\/\/kentprotect.com\/?p=494"},"modified":"2023-04-09T08:04:50","modified_gmt":"2023-04-09T13:04:50","slug":"breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/","title":{"rendered":"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits"},"content":{"rendered":"<div class='booster-block booster-read-block'><\/div>\n<p class=\"wp-block-paragraph\">(image source: TMX Finance (topworkplaces.com), n.d.)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>One-sentence summary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan, data breach affects 4.8 million, resulting in three class-action lawsuits.  <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Who was involved?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan, 4,822,580 customers, and a threat actor. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What was the timeline?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">December 10, 2022: Threat actors gain initial access to TMX Finance (Illman, 2023)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 13, 2023: TMX Finance detects &#8220;suspicious activity&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">March 1, 2023: TMX Finance discovers the breach (per Maine OAG report) (Illman, 2023)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">March 30, 2023: TMX Finance begins consumer notification, however, says their investigation is &#8220;still in progress&#8221; <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">March 31, 2023: Class-action lawsuit is filed against TMX Finance in federal court in the Southern District of Georgia<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What occurred?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In December 2022, TMX Finance suffered a data breach that went undetected for over two months and affected over 4.8 million customers (Illman, 2023; TMX Finance, 2023). Breached information included: &#8220;name, date of birth, passport number, driver\u2019s license number, federal\/state identification card number, tax identification number, social security number and\/or financial account information, and other information such as phone number, address, and email address&#8221; (TMX Finance, 2023). A day after consumer notification, a class-action lawsuit was filed in the Southern District of Georgia (<em>Kolstedt v. TMX Finance Corporate Services, Inc., <\/em>2023). Two additional class-action lawsuits have been filed in the same district (Justia, 2023a; Justia, 2023b). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Estimated costs:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Associated incident response costs, breach notification costs, &#8220;global forensic cybersecurity experts,&#8221; 12 months Experian IdentityWorks, litigation defense costs, 7-day-a-week call center<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Involved laws: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">State: Maine: 10 M.R.S.A. \u00a7 1346<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Georgia: Georgia Deceptive Trade Practices Act (\u201cGeorgia DTPA\u201d), Ga. Code Ann. \u00a7 10- 1-370(5) (<em>Kolstedt v. TMX Finance Corporate Services, Inc., <\/em>2023, p. 38). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Root cause: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TBA or N\/A (see disclaimer)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Lessons learned: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;endpoint protection and monitoring&#8221; (TMX Finance, 2023, p. 1). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Sources: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Illman, E. (2023). Data Breach Notifications. In <em>Office of the Maine Attorney General<\/em>. Retrieved April 9, 2023, from https:\/\/apps.web.maine.gov\/online\/aeviewer\/ME\/40\/179ab0ce-2c43-4119-ae5a-db766d4be3e0.shtml<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Justia. (2023a, April 4). <em>Ross v. TMX Finance Corporate Services, Inc. et al<\/em>. Justia Dockets &amp; Filings. Retrieved April 9, 2023, from https:\/\/dockets.justia.com\/docket\/georgia\/gasdce\/4:2023cv00078\/89592<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Justia. (2023b, April 7). <em>Carder v. TMX Finance Corporate Services, Inc. et al<\/em>. Justia Dockets &amp; Filings. Retrieved April 9, 2023, from https:\/\/dockets.justia.com\/docket\/georgia\/gasdce\/4:2023cv00088\/89650<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kolstedt v. TMX Finance Corporate Services, Inc., Docket No. 4:23-cv-00076-WTM-CLR (S.D. Ga. 2023). https:\/\/www.classaction.org\/media\/kolstedt-v-tmx-finance-corporate-services-inc.pdf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TMX Finance. (2023). NOTICE OF DATA BREACH. In <em>Data Breach Notifications<\/em>. Office of the Maine Attorney General. Retrieved April 9, 2023, from https:\/\/apps.web.maine.gov\/online\/aeviewer\/ME\/40\/179ab0ce-2c43-4119-ae5a-db766d4be3e0\/10c498f9-1367-4030-bacc-e5698f177f13\/document.html<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TMX Finance (topworkplaces.com). (n.d.). <em>SE88894_logo_orig.png<\/em>. topworkplaces.com. https:\/\/content.energage.com\/company-images\/SE88894\/SE88894_logo_orig.png<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/e91SUk7RCH8?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">YouTube\/Blog Notification Post<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>(image source: TMX Finance (topworkplaces.com), n.d.) One-sentence summary: TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan, data<\/p>\n","protected":false},"author":4,"featured_media":495,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[392,68,3,12,13,76,63,274,421,75,61,11,10,77,74,444,14,451,415,446,69,71,241,72,70,450,454,8,27,453,452,67,15,81,449,448,447],"class_list":["post-494","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-breach-report","tag-banking","tag-been-pwned","tag-breach-report","tag-breaches","tag-ciso","tag-cloud","tag-computer-security","tag-computers","tag-credit","tag-cyber-security","tag-cybercrime","tag-cybersecurity","tag-dallas","tag-dark-web","tag-data-breach","tag-employee","tag-executive","tag-finance","tag-georgia","tag-government","tag-have-been-pwned","tag-have-i-pwned","tag-haveibeenpwned","tag-i-been-pwned","tag-i-have-been-pwned","tag-instaloan","tag-interest","tag-kent-protect","tag-kentprotect","tag-lending","tag-loans","tag-pwned","tag-summary","tag-texas","tag-titlebucks","tag-titlemax","tag-tmxfinance"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits - Kent Protect<\/title>\n<meta name=\"description\" content=\"TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan, data breach affects 4.8 million, resulting in three class-action lawsuits.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits - Kent Protect\" \/>\n<meta property=\"og:description\" content=\"TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan, data breach affects 4.8 million, resulting in three class-action lawsuits.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/\" \/>\n<meta property=\"og:site_name\" content=\"Kent Protect\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-09T12:35:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-09T13:04:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/SE88894_logo_orig.png\" \/>\n\t<meta property=\"og:image:width\" content=\"4500\" \/>\n\t<meta property=\"og:image:height\" content=\"1850\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kyler Kent CISSP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyler Kent CISSP\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/\"},\"author\":{\"name\":\"Kyler Kent CISSP\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\"},\"headline\":\"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits\",\"datePublished\":\"2023-04-09T12:35:36+00:00\",\"dateModified\":\"2023-04-09T13:04:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/\"},\"wordCount\":482,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/SE88894_logo_orig.png\",\"keywords\":[\"banking\",\"been pwned\",\"breach report\",\"breaches\",\"ciso\",\"cloud\",\"computer security\",\"computers\",\"credit\",\"cyber security\",\"cybercrime\",\"cybersecurity\",\"dallas\",\"dark web\",\"data breach\",\"employee\",\"executive\",\"finance\",\"georgia\",\"government\",\"have been pwned\",\"have I pwned\",\"haveibeenpwned\",\"I been pwned\",\"I have been pwned\",\"instaloan\",\"interest\",\"kent protect\",\"kentprotect\",\"lending\",\"loans\",\"pwned\",\"summary\",\"texas\",\"titlebucks\",\"titlemax\",\"tmxfinance\"],\"articleSection\":[\"The Breach Report!\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/\",\"name\":\"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits - Kent Protect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/SE88894_logo_orig.png\",\"datePublished\":\"2023-04-09T12:35:36+00:00\",\"dateModified\":\"2023-04-09T13:04:50+00:00\",\"description\":\"TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan, data breach affects 4.8 million, resulting in three class-action lawsuits.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/SE88894_logo_orig.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/SE88894_logo_orig.png\",\"width\":4500,\"height\":1850,\"caption\":\"TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan logo\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/09\\\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kentprotect.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"name\":\"Kent Protect\",\"description\":\"Starring the Breach Report! and other security and cybersecurity series\",\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kentprotect.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\",\"name\":\"Kent Protect\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"width\":209,\"height\":161,\"caption\":\"Kent Protect\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\",\"name\":\"Kyler Kent CISSP\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"caption\":\"Kyler Kent CISSP\"},\"description\":\"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \\\"SOC Analyst Career Guide\\\" (ISBN-13: 9781835467466). https:\\\/\\\/linktr.ee\\\/kentprotect.com Corrections: corrections@kentprotect.com\",\"sameAs\":[\"http:\\\/\\\/kylerkent.com\"],\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/author\\\/kylerkent\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits - Kent Protect","description":"TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan, data breach affects 4.8 million, resulting in three class-action lawsuits.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/","og_locale":"en_US","og_type":"article","og_title":"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits - Kent Protect","og_description":"TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan, data breach affects 4.8 million, resulting in three class-action lawsuits.","og_url":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/","og_site_name":"Kent Protect","article_published_time":"2023-04-09T12:35:36+00:00","article_modified_time":"2023-04-09T13:04:50+00:00","og_image":[{"width":4500,"height":1850,"url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/SE88894_logo_orig.png","type":"image\/png"}],"author":"Kyler Kent CISSP","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyler Kent CISSP","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/#article","isPartOf":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/"},"author":{"name":"Kyler Kent CISSP","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116"},"headline":"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits","datePublished":"2023-04-09T12:35:36+00:00","dateModified":"2023-04-09T13:04:50+00:00","mainEntityOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/"},"wordCount":482,"commentCount":0,"publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/SE88894_logo_orig.png","keywords":["banking","been pwned","breach report","breaches","ciso","cloud","computer security","computers","credit","cyber security","cybercrime","cybersecurity","dallas","dark web","data breach","employee","executive","finance","georgia","government","have been pwned","have I pwned","haveibeenpwned","I been pwned","I have been pwned","instaloan","interest","kent protect","kentprotect","lending","loans","pwned","summary","texas","titlebucks","titlemax","tmxfinance"],"articleSection":["The Breach Report!"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/","url":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/","name":"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits - Kent Protect","isPartOf":{"@id":"https:\/\/kentprotect.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/#primaryimage"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/SE88894_logo_orig.png","datePublished":"2023-04-09T12:35:36+00:00","dateModified":"2023-04-09T13:04:50+00:00","description":"TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan, data breach affects 4.8 million, resulting in three class-action lawsuits.","breadcrumb":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/#primaryimage","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/SE88894_logo_orig.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/SE88894_logo_orig.png","width":4500,"height":1850,"caption":"TMX Finance, parent company of TitleMax, TitleBucks, and InstaLoan logo"},{"@type":"BreadcrumbList","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/09\/breach-report-tmx-finance-titlemax-titlebucks-instaloan-data-breach-affects-4-8-million-results-in-three-class-action-lawsuits\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kentprotect.com\/"},{"@type":"ListItem","position":2,"name":"Breach Report: TMX Finance (TitleMax, TitleBucks, InstaLoan) data breach affects 4.8 million, results in three class-action lawsuits"}]},{"@type":"WebSite","@id":"https:\/\/kentprotect.com\/#website","url":"https:\/\/kentprotect.com\/","name":"Kent Protect","description":"Starring the Breach Report! and other security and cybersecurity series","publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kentprotect.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kentprotect.com\/#organization","name":"Kent Protect","url":"https:\/\/kentprotect.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","width":209,"height":161,"caption":"Kent Protect"},"image":{"@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116","name":"Kyler Kent CISSP","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","caption":"Kyler Kent CISSP"},"description":"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \"SOC Analyst Career Guide\" (ISBN-13: 9781835467466). https:\/\/linktr.ee\/kentprotect.com Corrections: corrections@kentprotect.com","sameAs":["http:\/\/kylerkent.com"],"url":"https:\/\/kentprotect.com\/index.php\/author\/kylerkent\/"}]}},"_links":{"self":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/494","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/comments?post=494"}],"version-history":[{"count":2,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/494\/revisions"}],"predecessor-version":[{"id":499,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/494\/revisions\/499"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media\/495"}],"wp:attachment":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media?parent=494"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/categories?post=494"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/tags?post=494"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}