The cyberattack that disrupted First American Financial's systems in late December impacted 44,000 individuals, according to regulatory filings on Friday.
In an 8K disclosure to the Securities and Exchange Commission (SEC), the title insurance company stated that its investigation of the incident is complete, though it provided few additional details.
"Based on our investigation, the Company has determined that personal information of approximately 44,000 individuals may have been accessed without authorization due to the incident," First American reported. "The Company will notify potentially affected individuals and offer them credit monitoring and identity protection services at no cost."
HousingWire initially reported on December 21, 2023, that the company had been hacked. First American took about a week to restore its systems and contain the threat.
The breach significantly affected the company's fourth-quarter operations, leading to a 15% revenue drop compared to the same period in 2022.
The attack occurred less than a month after First American was fined $1 million by the New York Department of Financial Services (DFS) for a cybersecurity violation settlement.
First American was the second major title insurance company hit by a cybersecurity incident within a month. In late November, Fidelity National Financial experienced a ransomware attack that took its systems offline for a few days, with the ransomware group AlphV/BlackCat claiming responsibility.
Mortgage lenders and servicers Mr. Cooper and loanDepot also faced significant cyberattacks that resulted in substantial financial losses.