First American Financial Corporation filed an 8-K/A amending its December 22, 2023 disclosure of a cybersecurity incident. The company detected unauthorized activity on its IT systems, elected on December 20, 2023 to isolate systems from the Internet, retained experts, worked with law enforcement, and notified regulators. The company believes the perpetrator accessed certain systems, exfiltrated data, and encrypted data on certain non-production systems. The incident is believed contained; investigation is ongoing.