US consumer finance company TMX Finance has revealed a serious breach of customer data that was first discovered about three months ago.
The Savannah, Georgia-based company said in a notice of infringement filed with the Maine Attorney General’s Office that the infringement likely began in early December 2022. But the company didn’t discover him until February 13, 2023.
“A March 1, 2023 investigation confirmed that the information may have been obtained between February 3, 2023 and February 14, 2023. We immediately began reviewing files that may have been found in the incident to determine what information may have been included in this incident. We have not delayed this notice because of the circumstances,” the statement said.
“Relevant personal information may include your name, date of birth, passport number, driver’s license number, federal/state identification number, tax ID number, social security number and/or financial account information, and telephone number. It may include other information such as your address, email address.”
For details on the data breach, Latitude Financial acknowledges the millions affected by the breach.
TMX Finance claims that the incident is now contained and that it has reset all employee passwords and added endpoint protection and monitoring to strengthen its defensive security posture.
Lenders are providing affected customers with free credit monitoring and identity protection from Experian for 12 months, but are urging them to regularly check their account statements for unusual activity.
A variety of stolen data gives fraudsters the opportunity to attempt identity fraud, such as opening a new line of credit in the name of a compromised customer. It can also provide useful information for crafting highly convincing phishing emails designed to gather more financial information.
The billion-dollar company operates three major brands: TitleMax, TitleBucks, and InstaLoan, in approximately 1,000 locations across the United States.
More than 4.8 million customers were affected, according to the letter.
Editorial image credit: Lutsenko_Oleksandr / Shutterstock.com
