TMX Finance

TMX Finance operates under the brand names TitleMax, TitleBucks, and InstaLoan, offering consumer financial products such as auto title loans, payday loans, and installment loans. These services are primarily aimed at individuals seeking short-term credit solutions and are delivered through retail locations and online channels. The organization functions within the consumer finance sector, adhering to applicable state and provincial lending regulations. Its core activity involves extending credit based on the value of a borrower's vehicle or other assets, with repayment terms structured to align with the borrower's income cycle.

The organization’s headquarters is located in Canada. TMX Finance came to public attention in December 2022 when it disclosed a data breach that exposed personal information of approximately 4.8 million individuals. The compromised data included names, dates of birth, government identification numbers, Social Security numbers, financial account details, contact information, and email addresses. The breach resulted from unauthorized system access that persisted for several months before detection. Data exfiltration occurred over an eleven‑day period. In response, the company contained the incident, strengthened endpoint security, mandated password resets, notified law enforcement, and offered affected individuals complimentary identity protection services. Additionally, the organization established ongoing monitoring measures to reduce the risk of recurrence.