First American Financial Corp., one of the world’s largest real estate title insurance companies, exposed hundreds of millions of title insurance customer financial records.
According to Brian Krebs, First American leaked hundreds of millions of documents related to mortgage deals going back to 2003. Records include financial data such as bank accounts, tax data, social security numbers, and wire transactions.
A real estate developer contacted Krebs and warned that a portion of its First American website (firstam.com) leaked up to potentially hundreds of millions of records without requiring user authentication. Krebs confirmed the First American’s website exposed nearly 885 million files, the earliest records going back more than 16 years.
“The information exposed by First American would be a virtual gold mine for phishers and scammers involved in so-called Business Email Compromise (BEC) scams,” Krebs warned.
Krebs further clarified he had no evidence the records were misused or mass-harvested by bad actors, but rather merely exposed from First American’s Web site.