Embed Notice

In 2019, I broke the news that First American Title Insurance Co, the country's second-largest title insurer, had leaked on its public website hundreds of millions of documents related to mortgage deals going back to 2003. The digitized records — including bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers license images — were available without authentication to anyone with a Web browser.

https://krebsonsecurity.com/2019/05/first-american-financial-corp-leaked-hundreds-of-millions-of-title-insurance-records/

According to a report today from Newsday, First American has agreed to pay New York state $1 million for violating the state's cybersecurity regulation.

Not sure how the regulators reached $1m as an appropriate fine, but it seems small to me.

https://www.newsday.com/business/first-american-title-insurance-settlement-new-york-xh6x1gj0