State records show TOTAL METALL RECYCLING, INC. AKA TMR notified the Illinois Attorney General of a data breach on August 20, 2025. Affected individuals receive a formal notification letter by mail. That letter is proof your information was exposed — and the starting point for a free claim review.
The Illinois Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the Illinois Attorney General filing, the TOTAL METALL RECYCLING, INC. AKA TMR incident compromised these categories of personal information:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Total Metall Recycling, Inc., also known as TMR, operates within the industrial scrap metal processing, recycling, and heavy manufacturing supply chain sector. As a commercial recycling enterprise, the company routinely manages extensive operational networks involving vendor contracts, commercial transactions, supply chain logistics, and internal workforce administration. Consequently, TMR maintains vast repositories of sensitive personally identifiable information belonging to its employees, independent contractors, and business partners. This data typically encompasses detailed human resources files, payroll administration records, banking and direct deposit information, and confidential corporate communications necessary for managing a heavy industrial enterprise.
In 2025, Total Metall Recycling, Inc. AKA TMR reported a significant data security incident to the Illinois Attorney General, triggering mandatory regulatory scrutiny and statutory notification protocols. While industrial and manufacturing supply chain organizations are increasingly targeted by sophisticated cybercriminal syndicates, incidents of this nature generally involve unauthorized external access to internal administrative networks, potential ransomware deployment, or vulnerabilities within third-party vendor management systems. These electronic intrusions often allow malicious actors to quietly infiltrate core digital infrastructure, examine proprietary corporate systems, and exfiltrate confidential files containing sensitive personal and financial data before detection occurs.
The exposure resulting from this security failure threatens victims with severe and long-lasting consequences. Because industrial recyclers and processing firms routinely process comprehensive personnel and payroll records, compromised data sets frequently include full legal names, Social Security numbers, dates of birth, home addresses, banking details, and wage compensation data. The unauthorized disclosure of Social Security numbers and banking credentials creates an immediate and alarming risk of identity theft, fraudulent credit card applications, unauthorized bank account takeovers, and fraudulent tax filings. Victims whose payroll or banking information has been compromised face a heightened, ongoing vulnerability to financial fraud that can take years to successfully mitigate.
Under Illinois state data protection laws, as well as common law negligence principles, Total Metall Recycling, Inc. AKA TMR had a strict legal duty to implement and maintain reasonable cybersecurity measures to safeguard the sensitive information entrusted to its care. Organizations that collect and store employee and business partner data are legally obligated to utilize robust administrative, physical, and technical safeguards, including multi-factor authentication, network segmentation, robust encryption protocols, and regular security audits. The occurrence of this data breach strongly suggests a potential failure to maintain these required industry-standard safeguards, raising serious questions regarding whether TMR adequately protected the individuals whose information was compromised.
Receiving a formal data breach notification letter from Total Metall Recycling, Inc. AKA TMR serves as official legal acknowledgment that your private information was compromised due to inadequate corporate security practices. Under established legal standards, the receipt of this notice provides affected individuals with the necessary legal standing to participate in a class action lawsuit seeking accountability, restitution, and enhanced protective measures. Importantly, impacted individuals do not need to demonstrate actual financial loss or out-of-pocket theft to pursue legal claims; the increased risk of future identity theft and the forced expenditure of time and effort to monitor credit are sufficient injuries under the law. Our firm evaluates these data breach cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket and owe no attorney fees unless we successfully recover compensation on your behalf.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from TOTAL METALL RECYCLING, INC. AKA TMR
You were a customer, patient, employee, or client of TOTAL METALL RECYCLING, INC. AKA TMR
Your personal information was stored in TOTAL METALL RECYCLING, INC. AKA TMR's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Your TOTAL METALL RECYCLING, INC. AKA TMR notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Look for the credit-monitoring offer section of your TOTAL METALL RECYCLING, INC. AKA TMR letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Claims windows close. Our team reviews TOTAL METALL RECYCLING, INC. AKA TMR breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
TOTAL METALL RECYCLING, INC. AKA TMR's systems were compromised, exposing stored personal records.
Reported to Attorney General
August 20, 2025
The Illinois AG received TOTAL METALL RECYCLING, INC. AKA TMR's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Compensation in a case like TOTAL METALL RECYCLING, INC. AKA TMR's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Illinois's Personal Information Protection Act (PIPA) and Biometric Information Privacy Act (BIPA) provide some of the strongest data protection rights in the country. BIPA allows statutory damages of $1,000–$5,000 per violation, and class actions have resulted in substantial settlements.
Other companies have notified the Illinois AG of breaches. Received one of these letters as well? You may have more than one claim.
Power Solutions International, Inc
Illinois · Jan 2025
Sunflower Medical Group
Illinois · Jan 2025
Orthominds, Llc (Supplemental)
Illinois · Jan 2025
Healthcare Service Corporation
Illinois · Jan 2025
The Pavilion At Healthpark Llc
Illinois · Jan 2025
Rosecrance Health Network
Illinois · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris