FIRST AMERICAN FINANCIAL CORPORATION

First American Financial Corporation notified the New Hampshire Attorney General of a data event affecting approximately 30 NH residents. Unauthorized activity was identified on Dec 18, 2023, leading to system isolation on Dec 20, 2023, due to an imminent ransomware attack. Personal information was accessed. The company engaged forensic experts, notified law enforcement, and is offering credit monitoring services.

First American Financial Corporation reported an external system breach (hacking) that occurred and was discovered on December 18, 2023. The breach affected 55 Maine residents, compromising their names in combination with their driver's license or non-driver identification card numbers. The company notified the affected individuals on June 10, 2024, and offered 24 months of complimentary credit monitoring and identity theft restoration services through Experian.

First American Financial Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2024-06-10. The breach occurred during 12/18/2023 - 1/2/2024. The breach was discovered on 12/18/2023. 41,638 individuals were affected. Notice was sent on 6/10/2024.

First American Financial Corporation notified Vermont AG of a cybersecurity incident discovered on Dec 18, 2023, involving unauthorized access to IT systems. The breach may have exposed names and other personal info. First American engaged external experts, worked with law enforcement, and offered 24 months of credit monitoring.

First American Financial Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2023-12-18 and was reported on 2024-06-10. 2,926 Indiana residents were affected. 41,683 individuals affected in total.

First American Financial Corporation reported a data security incident occurring on December 18, 2023. The company retained cybersecurity experts, strengthened network security, and notified law enforcement and regulators. Affected individuals were offered 24 months of credit monitoring and identity theft restoration services via Experian. The specific nature of the breach and data types are not detailed in the provided notification letter excerpt, though identity data is implied by the remediation offered.

First American Financial Corporation, a finance sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2023-12-18 and filed notice on 2024-06-10. 706 Washington residents were affected. 175 days elapsed between awareness and notification. 0 days to identify the breach. 15 days to contain the breach.

First American Financial Corporation reported a data breach to the Montana Attorney General. The breach was reported on 2024-06-10. The breach occurred on 12/18/2023. 72 Montana residents were affected.

First American Financial Corporation (NYSE: FAF) filed Amendment No. 2 to a Form 8-K disclosing a material cybersecurity incident under Item 1.05. Upon detecting unauthorized activity on certain IT systems, the company isolated systems from the internet on December 20, 2023, retained experts, worked with law enforcement, and notified regulators. The company believes the incident is contained and business operations have resumed. A material impact on Q4 2023 results of operations is expected, though not on overall financial condition.

First American Financial Corporation filed an 8-K/A amending its December 22, 2023 disclosure of a cybersecurity incident. The company detected unauthorized activity on its IT systems, elected on December 20, 2023 to isolate systems from the Internet, retained experts, worked with law enforcement, and notified regulators. The company believes the perpetrator accessed certain systems, exfiltrated data, and encrypted data on certain non-production systems. The incident is believed contained; investigation is ongoing.

First American Financial Corporation, a title-insurance company, disclosed in an SEC Form 8-K (Item 1.05) that it recently identified unauthorized activity on certain of its information technology systems. On December 20, 2023, the Company elected to isolate systems from the Internet. The Company retained leading experts, is working with law enforcement, and notified certain regulatory authorities. Scope, data types affected, financial impact, and threat actor remain undetermined at the time of filing.