First American Financial Corporation

Summary

First American Financial Corporation left hundreds of millions of mortgage-related documents exposed online, including records dating back to 2003. The documents included bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and driver’s license images. These documents were available on a web server and could be accessed by modifying the URL of a document link received from First American. By the afternoon on Friday, May 24, the company disabled the site that served the records. More information on the breach can be found in the KrebsOnSecurity article.