TitleMax Settlement Ends Data Breach Lawsuit Over Cyberattack Impacting Nearly 5 Million People

New to ClassAction.org? Read our Newswire Disclaimer

The companies behind TitleMax, TitleBucks and InstaLoan have agreed to settle a consolidated class action lawsuit over a data breach discovered in February 2023 that compromised the personal information of approximately 4.8 million consumers.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The court-authorized website for the TitleMax data breach settlement can be found at TMXDataSecuritySettlement.com.

The settlement agreement with TMX Finance Corporate Services, Inc. and TMX Finance LLC was preliminarily approved by the court in March 2025. The deal covers all United States residents whose personal information was accessed, stolen, affected or compromised as a result of the TitleMax data breach.

To receive certain benefits from the TitleMax class action settlement, class members must submit a valid claim form online or by mail by August 6, 2025.

TitleMax settlement claim forms can be filed online on this page. Alternatively, you can download a PDF claim form or contact the settlement administrator for a paper copy to complete and return by mail.

To submit a claim form online, you will need to provide your unique ID and PIN, which are located on the settlement notice you should have received by mail or email.

Related Reading: If You Got a TitleMax Data Breach Notice, Here’s What You Need to Know

As part of the deal, class members who file a timely, valid claim form will be eligible to receive $35 per person for undocumented losses or harm that is “fairly traceable” to the data breach, including for time spent handling issues related to the incident, loss of personal information, emotional distress or other damages, court documents share. Per the website, no documentation is required to claim this benefit.

Per the settlement website, there is an aggregate cap of $4.5 million for undocumented losses or harms linked to the TitleMax data breach.

In addition, consumers can submit a claim form for compensation of up to $500 for documented out-of-pocket losses that are reasonably linked to the cyberattack and have not already been reimbursed. According to the site, this may include expenses incurred as a result of identity theft, fraud or other misuse of personal data; fees for credit monitoring or other mitigative services; and miscellaneous costs such as postage, mileage or phone charges.

Per the settlement website, there is an aggregate cap of $2 million for claims for documented out-of-pocket losses.

All TitleMax settlement payouts may be reduced on a pro rata basis depending on the total number of claims that are submitted, court documents note.

The settlement agreement relays that class members who do not submit a claim form for the aforementioned benefits, or whose claim is not approved, will automatically have a one-time $20 credit applied to an outstanding balance they owe as reflected in their account with TitleMax, TitleBucks or InstaLoan. Consumers who owe less than $20 will have their account reduced to $0, the agreement adds.

Furthermore, as part of the deal, TMX has committed to implementing numerous data security enhancements to prevent future data breaches, the website states.

The agreement will resolve the class action lawsuits against TMX, which were consolidated in 2023. The court will decide whether to grant final approval to the terms of the settlement at a hearing on August 12, 2025.

TitleMax settlement benefits will be issued to eligible class members only if the deal receives ultimate court approval, and after any appeals are resolved.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.