TMX Finance hit with another class action following data breach

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

TMX Finance overview: 

• Who: A TMX Finance consumer is suing the consumer credit company.
• Why: The plaintiff says the company was negligent in its data security practices, leading to a data breach.
• Where: The TMX Finance class action lawsuit was filed in a Georgia federal court.
• What are my options: Try Norton LifeLock for data security solutions. 

TMX Finance Corporate Services Inc. was negligent with its data security practices, leading to a major security breach that saw more than 4.8 million people’s private information exposed to cybercriminals, a new class action lawsuit alleges.

Plaintiff Casaundra Alex filed the class action lawsuit against TMX Finance on May 4 in a Georgia federal court, alleging violations of state and federal consumer laws. 

According to the lawsuit, TMX Finance failed to properly secure and safeguard personal identifiable information (PII) of more than 4.8 million individuals. 

As a result, a data breach allegedly exposed this PII to cybercriminals — information including name, date of birth, passport number, driver’s license number, federal/state identification card number, tax identification number, Social Security number, financial account information and other information such as phone number, address and email address.

This lawsuit follows at least four other recent class action lawsuits alleging TMX Finance failed to secure and safeguard consumers’ private information during a December 2022 data breach that may have impacted 4.8 million individuals.

Data breach wasn’t revealed for over a month

TMX provides consumer credit products under the TitleMax, TitleBucks and InstaLoan brands. The lawsuit alleges that, through its business, TMX collected the PII of credit applicants and stored it unencrypted in an Internet-accessible environment on its network.

TMX allegedly learned of a data breach on its network that occurred on or around Feb. 3, 2023, to Feb. 14, 2023, the lawsuit states. Despite learning of it on about Feb. 3, 2023, it wasn’t until around March 30 that the company began notifying various state attorneys general of the breach.

“The PII was compromised due to Defendant’s negligent and/or careless acts and omissions and the failure to protect the PII of Plaintiff and the Class Members,” the lawsuit states.

The exposed PII of TMX Finance customers can now be sold on the dark web, the lawsuit says.

As a result, the plaintiff is seeking to represent a nationwide class of people affected by the data breach, plus a Georgia subclass.

Alex seeks certification of the class action, damages, fees, costs and a jury trial, plus strengthening of TMX Finance’s data security practices monitored by a third party for the next 10 years.

What do you think of the allegations in this TMX Finance data breach class action lawsuit? Let us know in the comments.

The plaintiff is represented by Paul W. Painter III of Bowen Painter LLC and Simon B. Paris and Patrick Howard of Saltz Mongeluzzi & Bendesky PC. 

The TMX Finance Corporate Services class action lawsuit is Casaundra Alex, et al. v. TMX Finance Corporate Services Inc., Case No. 4:23-cv-00124-RSB-CLR in the U.S. District Court for the Southern District of Georgia. 

Read About More Class Action Lawsuits & Class Action Settlements:

• Class action lawsuit over LendingTree data breach headed to mediation
• American Bar Association class action claims data breach affected 1.3M members
• Dish Network class action alleges data breach compromised customer, employee info
• NationsBenefits class action claims data breach affects 3M consumers