TMX Data Settlement 2026: The $6.5M TitleMax Breach Payout and Who Qualified
Quick Answer
- TMX Finance settled a class action over its February 2023 data breach for $6.5 million, covering approximately 4.8 million affected individuals .
- Class members could claim up to $500 for documented losses or a flat $35 for undocumented harm, but the claim deadline was August 6, 2025 .
- Current or former customers of TitleMax, TitleBucks, or InstaLoan who received a breach notice were likely class members .
The TMX data settlement resolved claims against TMX Finance, the parent company of TitleMax, TitleBucks, and InstaLoan. The lawsuit alleged that TMX failed to protect customer data during a breach that occurred between February 3 and February 14, 2023 . Hackers accessed names, Social Security numbers, driver’s license information, and financial account details .
The settlement created a $6.5 million fund to compensate affected customers, with individual payments reaching up to $500 for documented out-of-pocket losses . The court granted final approval on September 2, 2025 .
This article breaks down what the settlement covered, who qualified, and what you need to know now that the claim period has closed. One detail that matters: even class members who never filed a claim received a $20 credit toward any outstanding balance owed to TMX subsidiaries .
The Facts
| Case | Kolstedt, et al. v. TMX Finance Corporate Services, Inc., et al. |
|---|---|
| Court | U.S. District Court, Southern District of Georgia, Savannah Division |
| Case Number | 4:23-cv-00076-RSB-CLR |
| Status | Settled, final approval granted September 2, 2025 |
| Fund Size | $6,500,000 |
| Est. Per Person | Up to $500 documented losses; $35 undocumented; $20 debt credit |
| Claim Deadline | August 6, 2025 (passed) |
| Administrator | Simpluris, Inc. |
| Proof Needed | Documentation for losses; Unique ID and PIN required |
Is the TMX Data Settlement Legit or a Scam?
The TMX data settlement is a legitimate, court-approved class action. The case is Kolstedt, et al. v. TMX Finance Corporate Services, Inc., et al., filed in the U.S. District Court for the Southern District of Georgia . The settlement received final approval on September 2, 2025, and the court oversaw the entire process .
The settlement administrator was Simpluris, Inc., a professional claims administration firm retained by the parties to handle notice, claims processing, and distribution . The official settlement website was TMXDataSecuritySettlement.com .
The scam risk now comes from websites claiming you can still file a claim or get a new payment. The claim deadline was August 6, 2025 . That date has passed. Any site promising a new TMX payout is misleading you.
TMX did not admit wrongdoing as part of the settlement. The agreement states that no court has made any determination of wrongdoing by TMX .
Key Takeaway: The TMX data settlement is real and closed. The claim deadline passed in August 2025. No new claims can be filed.
How Much Could You Get From the TMX Data Settlement?
The TMX settlement offered three tiers of benefits, depending on what you could prove and whether you filed a claim. The maximum individual payment was $500 for documented out-of-pocket losses .
Here is the verified breakdown:
| Benefit Type | Amount | Requirements |
|---|---|---|
| Documented Out-of-Pocket Losses | Up to $500 | Receipts, bank statements, invoices, or proof of fraud |
| Undocumented Losses or Harm | Flat $35 | No documentation required |
| Debt Reduction (no claim filed) | $20 credit | Applied to outstanding balance owed to TMX |
The settlement fund was divided into capped pools. Up to $4,500,000 was allocated for undocumented losses claims, and up to $2,000,000 for documented out-of-pocket losses . Payments could be reduced on a pro rata basis depending on how many valid claims were submitted .
The $20 debt credit applied automatically to class members who did not file a claim or whose claim was not approved. If the outstanding balance was less than $20, the account was reduced to zero .
Key Takeaway: Documented losses paid up to $500. Undocumented claims paid a flat $35. Non-claimants received a $20 debt credit. Pro rata reductions applied if claims exceeded the fund caps.
Who Qualified for the TMX Data Breach Settlement?
Class members were all U.S. residents whose personal information was accessed, stolen, or compromised in the TMX Finance data breach, as identified in the official class list . The class included approximately 4.8 million individuals nationwide .
You likely qualified if you were a current or former customer of TitleMax, TitleBucks, or InstaLoan and received a settlement notice by mail or email . The breach affected customers whose data was stored on TMX systems during the February 2023 incident.
Excluded from the class were TMX officers, directors, and legal representatives, as well as any judge or judicial officer presiding over the case and their immediate families . Anyone who timely opted out was also excluded.
Key Takeaway: If you were a TitleMax, TitleBucks, or InstaLoan customer whose data was compromised in the February 2023 breach, you were likely a class member.
What Was the TMX Finance Data Breach About?
The TMX Finance data breach occurred between February 3 and February 14, 2023, when hackers accessed the company’s network and stole customer files . The breach exposed names, Social Security numbers, driver’s license information, and financial account details .
TMX Finance is a financial services provider offering personal loans and title loans under the brands TitleMax, InstaLoan, and TitleBucks . The company reported the breach and began notifying affected customers in March 2023.
The lawsuit alleged that TMX failed to implement adequate cybersecurity measures to protect consumer data . Rather than admit wrongdoing, the company agreed to settle for $6.5 million to resolve the allegations and avoid prolonged litigation .
As part of the settlement, TMX also agreed to enhance its data security infrastructure .
Key Takeaway: The breach exposed sensitive customer data including Social Security numbers and financial account information for approximately 4.8 million people.
Reality Check: The TMX settlement is closed. You cannot file a new claim or receive a payment if you missed the August 6, 2025 deadline. Any website or service claiming you can still get money from this settlement is misleading you. If you were affected by the breach, monitor your credit and watch for identity theft, since stolen data can be used years later.
How Did You File a Claim for the TMX Data Settlement?
Filing a claim required a Unique Claim ID and PIN from the official settlement notice . Class members could file online or download a paper claim form and mail it to the settlement administrator.
Here are the steps that were required:
- Locate your notice. The Unique ID and PIN were on the postcard notice or email you received.
- Choose your claim type. Documented losses (up to $500) or undocumented losses (flat $35).
- Gather documentation for losses. Receipts, bank statements, invoices, or proof of fraudulent activity.
- Submit online or by mail. The mailing address was TMX Data Settlement, PO Box 25043, Santa Ana, CA 92799 .
- Meet the deadline. All claims had to be submitted online or postmarked by August 6, 2025 .
- Select payment method. Check by mail or electronic payment .
If you could not locate your ID and PIN, you could contact the settlement administrator by emailing [email protected] .
What Happens Next
Closed: The TMX data settlement is fully resolved. Final approval was granted on September 2, 2025, and payments were distributed to valid claimants .
Ongoing: Class members who received the $20 debt credit have had it applied to their accounts with TMX subsidiaries .
Ongoing: Monitor your credit reports for signs of identity theft. The breach exposed Social Security numbers and financial account information, which can be used years after the incident.
Future: Check Class Action Buddy and other settlement trackers for any new TMX Finance lawsuits that may arise .
Frequently Asked Questions
Is the TMX data settlement still open?
No. The claim deadline was August 6, 2025, and final approval was granted on September 2, 2025. The settlement is closed .
How much was the TMX Finance data breach settlement?
The settlement fund was $6.5 million. Class members could claim up to $500 for documented losses or a flat $35 for undocumented harm .
Who qualified for the TMX data breach settlement?
Current or former customers of TitleMax, TitleBucks, or InstaLoan whose personal information was compromised in the February 2023 breach .
What was the TMX Finance data breach?
A cyberattack between February 3 and February 14, 2023, that exposed names, Social Security numbers, driver’s license information, and financial account details of approximately 4.8 million customers .
Can I still file a claim for the TMX settlement?
No. The claim deadline was August 6, 2025. That date has passed, and the settlement is closed .
What is the $20 debt credit?
Class members who did not file a claim or whose claim was not approved automatically received a $20 credit toward any outstanding balance owed to TMX Finance subsidiaries .
Who was the settlement administrator?
Simpluris, Inc. handled the settlement administration. The mailing address was TMX Data Settlement, PO Box 25043, Santa Ana, CA 92799 .
What should I do if I was affected by the breach?
Monitor your credit reports for signs of identity theft and consider placing a fraud alert or credit freeze. The settlement deadline has passed, but the risk of identity theft remains.
