ORANGE COUNTY, CA – First American Financial Corp., Santa Ana-based title insurance behemoth, hundreds of millions of customers' detailed accounts were available for download, according to a report by KrebsOnSecurity.com.
Due to an indefinite security error, anyone with a web browser could have downloaded detailed financial information from First American Financial Corp. clients, including driver card pictures, social security numbers, wire transaction revenue, mortgage and tax information, and bank information they said.
First American provides title insurance and settlement services to real estate and mortgage customers, including home security. The site error discovered by Ben Shoval, a real estate developer from Washington State, was stopped at. 1
"The earliest available document referred to a real estate deal from 2003," Shoval stated. The site returned a search of documents up to 885 million, he said.
He also said it did not know how many, if any, data were retrieved from that application.
First Americans have disabled the site that served the downloadable items, PDF files and post-dated forms for upcoming real estate closings, KrebsonSecurity reported.
A spokesman for the company issued a statement that recognized the problem.
"First Americans learned from a design error in one of its production applications that allowed unauthorized access to customer data," they told Patch. "Security, privacy and confidentiality are top priority and we are committed to protecting our customers' information."
"Therefore, the company took immediate action to resolve the situation and close external access to the application. We are currently evaluating the effect if anyone has this on the security of customer information. We have hired an outside forensic company to assure us that there has been no meaningful unauthorized access to our customer data. "
Over 18,000 people work on First American, and the company earned over 5.7 billion in 2018.