First American Financial Corp. Leaked Hundreds of Millions of Title Insurance Records
Summary: First American Financial Corp.'s website exposed approximately 885 million documents, some dating back to 2003, without authentication to anyone with a browser, until KrebsOnSecurity notified the company and it disabled the site on May 24, 2019. A developer found that modifying a single digit in a document URL yielded other parties' records, which included Social Security numbers, bank account numbers, wire transaction receipts, and driver's license images.
Bottom line: The FBI calls business email compromise the most costly form of cybercrime today, and this leak handed scammers a live feed of upcoming real estate closings with the names, email addresses, and phone numbers of buyers and closing agents - the exact ingredients for convincing wire-fraud phishing.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026