United States
USA
First American cyberattack delays property settlements and title transactions
On 20 December 2023 First American isolated information systems after discovering unauthorized activity. Its title and settlement services suffered delayed real-estate transactions, with some closings moved to competitors; SEC amendments subsequently confirmed unauthorized access, data exfiltration and encryption on non-production systems.
81
Estimated severity
81 / 100
96
Source reliability
96 / 100
Approximate Date
2023-12-20
Targeted Company
FIRST AMERICAN FINANCIAL
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Operational disruptionOrder processing disruptionService unavailability
Affected sectors
Finance & InsuranceReal Estate & Commercial Facilities
Affected departments
Customer ServiceInformation Technology
Attack Profile
Attack types
Data exfiltrationUnauthorized access
Attributed threat actors
No information
Sources
Incident Sources
sec.govhttps://www.sec.gov/Archives/edgar/data/1472787/000095017024004247/faf-20231220.htmsec.govhttps://www.sec.gov/Archives/edgar/data/1472787/000095017023072513/faf-20231220.htmhousingwire.comhttps://www.housingwire.com/articles/first-american-cybersecurity-attack-disrupts-closings-over-holidays/