Security News > 2023 > December > First American takes IT systems offline after cyberattack
First American Financial Corporation, the second-largest title insurance company in the United States, took some of its systems offline today to contain the impact of a cyberattack.
"First American has experienced a cybersecurity incident," the company said in a statement published on a website dedicated to the cyberattack.
Founded in 1889, First American provides financial and settlement services to home buyers and sellers, real estate professionals, and others involved in residential and commercial property transactions.
On November 28, First American paid a $1 million penalty to settle violations of New York's Department of Financial Services' Cybersecurity Regulation stemming from a May 2019 breach.
"As the nation's second-largest title insurance company, First American collects the personal and financial data of hundreds of thousands of individuals annually on title-related documents and stores that information in its proprietary EaglePro application," New York's DFS said.
"In May 2019, First American senior management learned of a vulnerability in the application whereby any individual in possession of the link used to access EaglePro could access not only their own documents without authentication, but also those of individuals in unrelated transactions."