DisclosureLens
HackingFinancial ServicesFinanceGovernment IDHigh

FIRST AMERICAN FINANCIAL CORPORATION

bd_03c54138ce498d6e · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 18, 2023

Filed

Jun 10, 2024

To disclose

25 weeks

Affected · nationwide

41,63855 in this filing

Linked

11 filings

Confidence

50%
Full breach record for FIRST AMERICAN FINANCIAL CORPORATION →2 incidents on file

First American Financial Corporation reported an external system breach (hacking) that occurred and was discovered on December 18, 2023. The breach affected 55 Maine residents, compromising their names in combination with their driver's license or non-driver identification card numbers. The company notified the affected individuals on June 10, 2024, and offered 24 months of complimentary credit monitoring and identity theft restoration services through Experian.

Maine clockDiscovered Dec 18, 2023 → Filed with AG Jun 10, 2024175d ✗ ME AG >90d25 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 25 weeks / 175 days

Dec 18, 2023

Begins

Dec 18, 2023

Discovered

Jun 10, 2024

Filed

vs. sector median

+17 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 13d gap

Filing propagation · 11 filings · 10 states

View merged incident ↗
SEC 8-KMay 28 · first
Illinois State AG+4d
Oregon State AG+13d
Vermont State AG+13d
Indiana State AG+13d
California State AG+13d
Washington State AG+13d
Montana State AG+13d
Maine State AG+13d · this page
Massachusetts State AG+14d
New Hampshire State AG+14d

Pattern: first filing May 28, last Jun 11 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.