$42M TMX Finance data breach class action settlement deal nears final approval

Update:

• The final approval hearing is scheduled for Aug. 12. 
• TMX Finance customers have asked a Georgia federal judge to grant final approval of a $42 million settlement resolving claims related to a data breach that exposed the personal information of approximately 4.8 million individuals.
• The deadline to file a claim for the TMX Finance class action settlement is Aug. 6, 2025.
• The breach, discovered in February 2023, allegedly began in December 2022 and involved the unauthorized access of sensitive data, including Social Security numbers, driver’s license numbers and passport numbers.
• Plaintiffs claim TMX could have prevented the breach and argued that the company’s offer of 12 months of identity monitoring services was inadequate.

TMX Finance data breach class action lawsuits overview: 

• Who: Helena Michelle Ross, Savannah Kolstedt, Tommy Domino and Sophia Pickens filed separate class action lawsuits against TMX Finance Corporate Services Inc. 
• Why: Ross, Kolstedt, Domino and Pickens claim TMX failed to properly safeguard their personal information during a December 2022 data breach. 
• Where: The class action lawsuits were filed in Georgia federal court.
• What are my options: NortonLifeLock carries cybersecurity options for those affected by data breaches.

TMX Finance failed to secure and safeguard consumers’ private information during a December 2022 data breach that may have impacted 4.8 million individuals, at least four new class action lawsuits allege. 

A quartet of consumers, who filed separate complaints in Georgia federal court, claim TMX Finance failed to follow basic security procedures that could have prevented their private information from being exposed in the data breach. 

Information exposed in the TMX Financial data breach included names, email addresses, birthdates, phone numbers, financial account information, Social Security numbers and drivers license, passport and tax identification numbers, according to the TMX Finance class actions. 

The consumers collectively want to represent nationwide classes and a Wisconsin and Georgia subclass of individuals who had their private information potentially exposed in the data breach, which TMX Financial informed them about on or around March 30. 

TMX Financial disclosed data breach began in December 2022, class action says

TMX Financial first noticed suspicious activity on its servers on Feb. 13, according to the class actions, which argue the company disclosed that an investigation found the data breach started in early December 2022. 

TMX informed consumers via a data breach notice that it contacted the U.S. Federal Bureau of Investigations about the data breach and planned to implement additional security procedures going forward. 

The class action lawsuits claim TMX Financial is guilty of negligence, negligence per se, breach of implied contract, unjust enrichment, invasion of privacy and violations of the Wisconsin Deceptive Trade Practices Act and the Georgia Deceptive Practices Act. 

The plaintiffs each demand a jury trial and request declaratory and injunctive relief along with awards of actual, consequential and/or nominal damages for themselves and all class members. 

A consumer filed a similar class action lawsuit against Independent Living Systems earlier this month, claiming the health-services company failed to implement basic security procedures that would have prevented a data breach last summer.

Were you impacted by the TMX Finance data breach? Let us know in the comments! 

The TMX Finance data breach class action lawsuits are Kolstedt, et al. v. TMX Finance Corporate Services Inc., et al., Case No. 4:23-cv-00076, Ross, et al. v. TMX Finance Corporate Services Inc., et al., Case No. 4:23-cv-00078, Domino, et al. v. TMX Finance Corporate Services Inc., et al., Case No. 4:23-cv-00080, and Pickens, et al. v. TMX Finance Corporate Services Inc., et al., Case No. 4:23-cv-00081, in the U.S. District Court for the Northern District of California.

Read About More Class Action Lawsuits & Class Action Settlements:

• Independent Living Systems class action claims data breach exposed patient information
• Debt-collection company data breach affects 500K people with past-due Bank of America accounts
• 3CX data breach affects hundreds of thousands of users
• CorrectCare data breach affects personal data of 1.5M individuals