First American Financial Corp. Leaked Hundreds of Millions of Title Insurance Records (May 24, 2019)
KrebsOnSecurity was notified that the website for the Fortune 500 real estate title insurance company “First American Financial” was leaking hundreds of millions of financial and Personally Identifiable Information (PII) documents dating back to 2003. The leaked data was stored in over 885 million records and consisted of: bank account numbers and statements, driver’s license images, mortgage and tax records, Social Security numbers, and wire transaction receipts.
Recommendation: The exposure of Personally Identifiable Information (PII) requires affected individuals to take precautionary measures to protect their identity and their finances. Identity theft services can assist in preventing illicit purchases, or applying for financial services from taking place by actors using stolen data. Furthermore, leaks of PII also increase the likelihood that actors will attempt to use the data to target individuals with spear phishing emails.
Indicators of Compromise (IOCs) associated with this story can be viewed by ThreatStream users here to identify potential malicious activity.