The TMX data security settlement claim form is closed: the filing deadline was August 6, 2025, the U.S. District Court for the Southern District of Georgia granted final approval in September 2025, and payments to approved claimants began around December 2025.1TMX Data Security Settlement. Savannah Kolstedt et al. v. TMX Finance Corporate Services, Inc. et al. The case resolved claims tied to a data breach at the TMX Finance Family of Companies — the parent of TitleMax, TitleBucks, and InstaLoan — that exposed the personal information of roughly 4.8 million customers between December 2022 and early 2023.2Maine.gov. Data Breach Notices – Section: Breach Information If you filed on time, your payment is either in transit or being processed. If you missed the deadline, you can no longer submit a claim for monetary benefits.
Where the Case Stands Now
The case, Savannah Kolstedt et al. v. TMX Finance Corporate Services, Inc. et al. (No. 4:23-cv-00059-RSB-CLR), moved through its final fairness hearing in September 2025 and is now in the payment-distribution phase.1TMX Data Security Settlement. Savannah Kolstedt et al. v. TMX Finance Corporate Services, Inc. et al. The Settlement Administrator began distributing payments to approved claimants in late 2025. If you filed a valid claim and have not yet received payment, check TMXDataSecuritySettlement.com for updates or contact the Settlement Administrator directly.
What the Claim Form Covered
The form asked filers to choose one of three benefit categories. Knowing which one you selected tells you what to expect in the mail or in your digital wallet.
$35 Flat Payment for Undocumented Losses
Class members could claim a flat $35 for general harm traceable to the breach — time spent monitoring accounts, emotional distress, or the loss of personal information itself. No receipts were required; the filer simply attested to the harm.3TMX Data Security Settlement. Savannah Kolstedt et al. v. TMX Finance Corporate Services, Inc. et al. – Section: Frequently Asked Questions This category carried an aggregate cap of $4.5 million.
Up to $500 for Documented Out-of-Pocket Losses
Filers who spent money dealing with the breach could claim reimbursement of up to $500 with supporting documentation. Qualifying costs included charges from fraudulent transactions or falsified tax returns; notary fees, postage, faxing, mileage, and long-distance calls tied to securing compromised accounts; professional fees for help resolving breach-related issues; and any credit monitoring service purchased after the breach was disclosed. Bank statements, receipts, or invoices had to back each expense. This category had a $2 million aggregate cap.3TMX Data Security Settlement. Savannah Kolstedt et al. v. TMX Finance Corporate Services, Inc. et al. – Section: Frequently Asked Questions
$20 Automatic Debt Credit
Class members who did nothing, or whose claims were not approved, automatically received a one-time $20 credit applied to any outstanding balance owed to TitleMax, TitleBucks, or InstaLoan.3TMX Data Security Settlement. Savannah Kolstedt et al. v. TMX Finance Corporate Services, Inc. et al. – Section: Frequently Asked Questions If you owed nothing to a TMX subsidiary, the credit had no practical value.
Why Your Payment May Be Less Than Expected
Both cash benefit pools had aggregate caps: $4.5 million for undocumented losses and $2 million for documented expenses. If total valid claims in either category exceeded the cap, every claimant’s payment was reduced proportionally.3TMX Data Security Settlement. Savannah Kolstedt et al. v. TMX Finance Corporate Services, Inc. et al. – Section: Frequently Asked Questions With nearly 4.8 million affected individuals, the $35 undocumented-loss payment is the category most likely to see a reduction. Attorneys’ fees were paid separately and did not draw from these pools.
If You Filed and Haven’t Been Paid
Payments go out through the method you selected when filing, usually a physical check or a digital payment platform. A few practical steps:
- Check your spam folder. Digital payment notifications from services like PayPal or Venmo sometimes get filtered.
- Verify your address. If you moved after filing, update your contact information with the Settlement Administrator through TMXDataSecuritySettlement.com.
- Hold onto your confirmation number and copies of anything you submitted until the payment clears.
What You Gave Up by Staying in the Class
By not opting out before the exclusion deadline, class members released all legal claims against TMX and related parties connected to the breach. You cannot file a separate lawsuit or join another class action over the same incident, regardless of whether you filed a claim or how much you receive.3TMX Data Security Settlement. Savannah Kolstedt et al. v. TMX Finance Corporate Services, Inc. et al. – Section: Frequently Asked Questions The release applies even to claims you may not have known about at the time. The opt-out window has closed, so this outcome is now fixed for anyone who did not formally exclude themselves.