FEDERALItem 7.01 · voluntary (Reg FD)HackingFinancial ServicesFinanceData ExfiltratedPIIIdentity (basic)MediumResolved

FIRST AMERICAN FINANCIAL CORPORATION

bd_9ad6d444f232d5fe · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 28, 2024

To disclose

—

Affected

44,000

Linked

11 filings

Confidence

69%

Full breach record for FIRST AMERICAN FINANCIAL CORPORATION →2 incidents on file

First American Financial Corp filed a supplemental 8-K disclosing unauthorized access to its IT systems. The investigation concluded that personal information of approximately 44,000 individuals was accessed. The company is notifying affected individuals and offering free credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

May 28, 2024

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Illinois State AGbd_47489894a5eca95b2024-06-01 · +4dVerified
Maine State AGbd_03c54138ce498d6e2024-06-10 · +13dCandidate
Oregon State AGbd_2c2d994f154ddba82024-06-10 · +13dVerified
Vermont State AGbd_71b5952cfc0bcda62024-06-10 · +13dVerified

Show 6 more filings ↓up to 14d gap

Indiana State AGbd_8859929ee6e3d9cd2024-06-10 · +13dVerified
California State AGbd_925be77b47ede7b02024-06-10 · +13dVerified
Washington State AGbd_e54d5f458060513b2024-06-10 · +13dVerified
Montana State AGbd_eb86e3765537060c2024-06-10 · +13dCandidate
Massachusetts State AGbd_1ab5e2b17c58412e2024-06-11 · +14dVerified
New Hampshire State AGbd_383f35344a3929d12024-06-11 · +14dVerified

Name: FIRST AMERICAN FINANCIAL CORPORATION
norm: first american financial
SEC CIK: 0001472787
Domain: firstam.com

Name: FIRST AMERICAN FINANCIAL CORPORATION
norm: first american financial
SEC CIK: 0001472787
Domain: firstam.com
Industry: Financial Servicesllm

Discovered: —
Materiality determined: May 21, 2024
Notification sent: —
Affected individuals: 44,000
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Provided appropriate notifications to potentially affected individuals
Offer those individuals credit monitoring and identity protection services at no cost to them
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

SEC 8-KMay 28 · first · this page

Illinois State AG+4d

Maine State AG+13d

Oregon State AG+13d

Vermont State AG+13d

Indiana State AG+13d

California State AG+13d

Washington State AG+13d

Montana State AG+13d

Massachusetts State AG+14d

New Hampshire State AG+14d

Pattern: first filing May 28, last Jun 11 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1472787/000095017024065359/faf-20240521.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: May 28, 2024
Raw hash: bf69c95b8590c1969173c43c7a206a61f1349ab21f1b956729d6eb982787867e

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html50.1 KB

Download View at source

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityFIRST AMERICAN FINANCIAL CORPORATION

Victim entityFIRST AMERICAN FINANCIAL CORPORATION

IncidentUnauthorized Access

Stated responseProvided appropriate notifications to potentially affected individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing