Leading U.S. title insurer may have exposed millions of client records

  Back to News

First American Financial Corp., one of the largest U.S. title insurers, may have allowed unauthorized access to more than 885 million records related to mortgage deals going back to 2003, according to a security researcher.

The flaw was outlined Friday in an article by Brian Krebs, a cybersecurity expert. Digitized records including “bank-account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts and driver’s license images were available without authentication to anyone with a web browser,” he wrote.

In a statement, First American said that it learned of a “design defect in one of its production applications that made possible unauthorized access to customer data” and has shut down external access.

“We are currently evaluating what effect, if any, this had on the security of customer information,” the company said. “We have hired an outside forensic firm to assure us that there has not been any meaningful unauthorized access to our customer data.”

Title insurers such as First American use their records and public documents to verify a seller is a property’s true owner and that it is free from liens. The companies collect a premium at the closing of the purchase and pay costs that may arise if someone disputes the new owner’s right to the property. That work means they regularly handle private information.

Ben Shoval, a real estate developer in Washington state, said he noticed the vulnerability after getting a link from First American earlier this week.

“I clicked on it and it sent me to a document that was for my transaction,” he said in an interview. “But when I looked at the link, I realized that if I just changed one number in it, it would show me other people’s private documents.”

Shoval said he tried notifying First American but received no response. Then he contacted Krebs, who was able to confirm the vulnerability and estimate its scale.

Krebs wrote in his article that he notified First American of the issue. He also noted that he didn’t have any information on whether fraudsters knew about the weakness or if any documents had been mass-harvested.

Earlier on Friday, he suggested that the leak was “truly massive.” The company’s shares fell 2.2% in post-market trading before rebounding.

A spokesman for First American declined to comment on the number of records potentially exposed or how long they were publicly available.

The exposure of the records is the latest in a series of data breaches that have affected hundreds of millions of Americans.

Last year, Marriott International said that a data breach lasting four years compromised the personal information of up to 500 million of its hotel guests. The data included passport numbers, birth dates and potentially credit card information, in addition to contact information such as mailing addresses and email addresses.

In 2017, Equifax shook the financial world when the credit reporting agency said criminals had exploited a flaw in its software to gain access to the Social Security numbers and other personal information of more than 140 million Americans.

This content has been reproduced from its original source.

SHARE:

  BACK

How Title Fraud Works

Thieves simply change ownership of your home from YOU to THEM. Then they TAKE OUT LOANS on your home and just disappear - leaving YOU with the payments and a mountain of legal bills.

Click to see if your home's title has been compromised.
Get your FREE TITLE SCAN and COMPREHENSIVE TITLE REPORT (a $100 value FREE with sign up)

FREE 30-Day Trial

Speak to a live agent
(800) 899-6268

100% Money Back Guarantee Within First 60 Days


Home Title Lock

Property ownership is not just the American dream, it's also the most flexible financial tool to build family prosperity. Home Title Lock ensures that your assets are protected against Title Fraud and Title Thieves.

Find Out More


You Need Home Title Lock to Protect Your Property

Thirty years ago we started creating the largest database of property records in the United States. Today, that database has 6.1 billion property records. We protect your property value and ownership from on-line threats both foreign and domestic.

GET PROTECTED

Speak to a live agent
(800) 899-6268


Watch This Now

FREE 30-Day Trial

How Easily Title Fraud Occurs

EVERYTHING is stored online in the cloud - including your home's title

1

Domestic and international thieves scour online records for homes with equity. It could be the home you live in, your vacation home, a home of an elderly relative, or rental property you own.


2

Once they change your home's ownership from YOU to THEM, they re-file the Quitclaim Deed for your home with the proper authorities so it appears your home has been legally sold.


3

They take out personal loans through banks and online lenders using all your home's equity. You likely won't know you're a victim until you start receiving late payments or foreclosure notices.

Click to see if your home's title has been compromised.
Get your FREE TITLE SCAN and COMPREHENSIVE TITLE REPORT (a $100 value FREE with sign up)

FREE 30-Day Trial

Speak to a live agent
(800) 899-6268

ACCORDING TO THE FBI:
Title and Mortgage Fraud are the fastest growing white collar crimes in America.

Everything is stored online these days - including your home's title. Domestic and international cyber-thieves target U.S. homeowners equity in their homes. Removing you from your home's title takes just minutes. Then they forge their name on the title document and refile it. Next, they take out loans using your home's equity and stick you with the payments. You likely won't know until you get a late payment or foreclosure notice from several banks.

Get your FREE TITLE SCAN and COMPREHENSIVE TITLE REPORT (a $100 value FREE with sign up)

FREE 30-Day Trial  

Title Fraud is NOT COVERED by

Your Bank

Legal Trust

Homeowners Insurance

Identity Theft Protection

You Need Home Title Lock to Protect Your Property

GET PROTECTED
Sign Up  

Activate Title Lock alerts and secure your property from fraudulent title filings