Cyber Risks · Krebs on Security

SEC Investigating Data Leak at First American Financial Corp.

Summary: The SEC is investigating whether First American Financial Corp. violated federal securities laws after its website exposed more than 885 million personal and financial records tied to mortgage deals dating back to 2003, viewable without authentication. First American said its review identified just 32 consumers whose non-public personal information was likely accessed without authorization, down from an earlier count of 484 files that likely were accessed.

What's compelling: The gap between 885 million exposed documents and 32 notified consumers rests entirely on how far back First American's access logs reach - a question the company has not answered, and one that determines whether the real victim count is knowable at all.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related