885 Million Mortgage Documents Exposed Thanks to Website Vulnerability

885 Million Mortgage Documents Exposed Thanks to Website Vulnerability

First American Financial Corporation was made aware of a flaw that exposed their client's mortgage documents.

Another week, another vulnerability making the private information public to the world. Last week, it was First American Financial Corporation who was notified by a well-known cybersecurity blogger that a flaw in its website was risking the information on 885 million records related to mortgage deals that dates back nearly 16 years.

According to Brian Krebs, writer of Krebs on Security, a flaw in an internet application allowed anyone with any basic web browser to see confidential data such as Social Security numbers, bank account details, driver's license and mortgage and tax records.  

The vulnerability was reported by Krebs on his blog and First American Financial quickly blocked all access as of last Friday.

"We are currently evaluating what effect, if any, this had on the security of customer information," the company said in a statement. "We will have no further comment until our internal review is completed."

According to the Associated Press, if the 885 million records were harvested by a bad actor, it would rank among one of the biggest leaks of data on the internet. 

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

New Products

  • new product

    Adams Rite 4300 Steel Hawk® Electrified Deadlatch

    Modernize aging storefront doors with a refined electrified deadlatch engineered to overcome sag, misalignment and heavy wear without replacing existing hardware.

  • ROAMEO and SARA new product image

    AITX ROAMEO™ and SARA™

    Deploy a unified, self-coordinating outdoor security presence by combining ROAMEO’s autonomous patrol capabilities with SARA’s proactive event assessment and real-time response.

  • ADI Control4 product image

    ADI Control4® X4 & Control4® Connect

    Drive long-term system value and reduce post-installation friction with a visually redesigned control interface paired with a secure, future-ready smart service framework.