TMX Finance and its subsidiaries TitleMax, TitleBucks, and InstaLoan have collectively disclosed a data breach that exposed the personal data of 4,822,580 customers.
In a data breach notification letter sent yesterday to impacted individuals, the Canadian finance giant informs that hackers breached its systems in early December 2022 but did not detect the breach until February 13th, 2023.
After completing the internal investigation on March 1st, 2023, TMX found that the network intruders had stolen client information between February 3rd and 14th, 2023.
“On February 13, 2023, we detected suspicious activity on our systems and promptly took steps to investigate the incident,” reads the data breach notice.
“Based on the investigation to date, the earliest known breach of TMX’s systems started in early December 2022.”.
The firm’s data breach notice also encloses instructions for individuals to enroll for a free 12-month identity protection service through Experian and request a security freeze.
