FEDERALItem 8.01 · voluntaryMalwareFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedPIIHighContained

FIDELITY NATIONAL FINANCIAL, INC.

bd_3c1edbfa41dbdd02 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 19, 2023

Filed

Jan 9, 2024

To disclose

7 weeks

Affected

1,300,000

Linked

4 filings

Confidence

67%

Full breach record for FIDELITY NATIONAL FINANCIAL, INC. →4 incidents on file

Fidelity National Financial, Inc. filed an amended 8-K/A reporting a cybersecurity incident discovered on November 19, 2023. An unauthorized third party accessed FNF systems, deployed non-self-propagating malware, and exfiltrated data. Approximately 1.3 million potentially impacted consumers were notified. The company notified law enforcement, regulators, and customers, provided credit monitoring services, and contained the incident by November 26, 2023. Systems have been restored.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 7 weeks / 51 days

Nov 19, 2023

Discovered

Jan 9, 2024

Filed

vs. sector median

1 wks faster

This filing is one of 4 about the same incident.View merged incident

A leak claim by alphv about this victim predates this filing by 47 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_7699611bf44290152023-11-22 · +47dCandidate

Regulatory filings (2) · sorted by filing gap

SEC 8-Kbd_8b40a33e0752e51f2023-11-30 · +40dVerified
SEC 8-Kbd_2cf2ab86439b34852023-11-21 · +49dVerified

Name: FIDELITY NATIONAL FINANCIAL, INC.
norm: fidelity national financial
SEC CIK: 0001331875
Domain: fnf.com

Name: FIDELITY NATIONAL FINANCIAL, INC.
norm: fidelity national financial
SEC CIK: 0001331875
Domain: fnf.com
Industry: Financial Servicesllm

Discovered: Nov 19, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 1,300,000nationwide
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: notified regulatory authorities

During the incident: Promptly commenced an investigation
Retained leading experts to assist the Company
Notified law enforcement authorities, regulatory authorities and other stakeholders
Followed our incident response plans
Took containment measures such as blocking access to certain of our systems
Notified its affected customers and applicable state attorneys general and regulators
Providing credit monitoring, web monitoring, and identity theft restoration services
Changes made: Systems used by the Company to provide services have been restored
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings

View merged incident ↗

SEC 8-KNov 21 · first

SEC 8-K+9d

SEC 8-K+49d · this page

Pattern: first filing Nov 21, last Jan 9 — a 49-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1331875/000133187524000005/fnf-20231119.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jan 9, 2024
Raw hash: 205ceb06e3dff5b316024904857f0e903db4ad61671010c79b9da817f47fe25d

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html33.0 KB

Download View at source

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityFIDELITY NATIONAL FINANCIAL, INC.

Victim entityFIDELITY NATIONAL FINANCIAL, INC.

Incidentdiscovered Nov 19, 2023

Stated responsePromptly commenced an investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing