A picture of the headquarters of First American, which is a large building with a front entrance featuring columns and flanked by flags.

Notices where this attachment appears

1. Embed this notice
   BrianKrebs (briankrebs@infosec.exchange)'s status on Thursday, 30-Nov-2023 12:34:35 JST BrianKrebs

   In 2019, I broke the news that First American Title Insurance Co, the country's second-largest title insurer, had leaked on its public website hundreds of millions of documents related to mortgage deals going back to 2003. The digitized records — including bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers license images — were available without authentication to anyone with a Web browser.

   https://krebsonsecurity.com/2019/05/first-american-financial-corp-leaked-hundreds-of-millions-of-title-insurance-records/

   According to a report today from Newsday, First American has agreed to pay New York state $1 million for violating the state's cybersecurity regulation.

   Not sure how the regulators reached $1m as an appropriate fine, but it seems small to me.

   https://www.newsday.com/business/first-american-title-insurance-settlement-new-york-xh6x1gj0