Security News > 2020 > July > Congrats, First American Title Insurance, you've made technology history. For all the wrong reasons

The Empire State's financial regulator said First American Title Insurance was so negligent with securing its data, it broke state laws on the protection of non-public information.

"For more than four years, First American Title Insurance Company exposed tens of millions of documents that contained consumers' sensitive personal information including bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers' license images," the DFS charged [PDF].

Though First American lists its headquarters as Santa Ana in California, it, like virtually every other sizable financial company in the nation, does much of its business in New York.

The exposed documents were stored in First American Title Insurance's FAST: a database responsible for holding hundreds of millions of scans of customers' official documents for things like mortgage filings.

The department has charged First American with six violations of the state's Code of Rules and Regulations related to the protection of data, monitoring access, risk assessment, and training of employees.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/07/23/american_title_insurance_ny/