First American Financial Corp, a U.S based financial services company leaked Hundreds of Million of Most sensitive records online that related to real estate and mortgage industries.
First American Fin corp is one of the oldest company the U.S and the company running its operation nearly 130 years with the core services of real property records and image, valuation products and services, home warranty products, property and casualty insurance, and banking, trust, and investment advisory services, etc.
Leaked data includes some of the highly sensitive data such as mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers license images, bank account numbers and statements.
Most importantly, Due to the lacking of security measures, the data were available to access anyone through the browser without any authentication.
Ben Shoval, A Real Estate developer recently uncovered the portion of First American owned web firstam.com that leaked hundreds of millions of records.
He reported to kerbs that says, “anyone who knew the URL for a valid document at the Web site could view other documents just by modifying a single digit in the link.
After the Further investigation, Kerbs confirms that the First American’s Web site exposed approximately 885 million files, the earliest dating back more than 16 years.
Tons of Exposed files contain some of the sensitive financial records, including the data about the wire transactions with bank account numbers and other information from home or property buyers and sellers.
Ben said. “The title insurance agency collects all kinds of documents from both the buyer and seller, including Social Security numbers, drivers licenses, account statements, and even internal corporate documents if you’re a small business. You give them all kinds of private information and you expect that to stay private.”
First American released a statement that says, “First American has learned of a design defect in an application that made possible unauthorized access to customer data. At First American, security, privacy, and confidentiality are of the highest priority and we are committed to protecting our customers’ information. The company took immediate action to address the situation and shut down external access to the application. We are currently evaluating what effect if any, this had on the security of customer information. We will have no further comment until our internal review is completed.”
It’s unclear how long the data were being in the online left open to access by anyone and any attacker stolen this First American’s financial information.
You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.
Also Read:
49 Million Instagram Influencers, Celebrities Personal Data Leaked Online
Box Data Leak – Terabytes of Data Exposed from Companies Using cloud based Box Accounts
SBI Data Leak – Millions of Customers Data Leaked From Unsecured Server
NASA Data Leak – Internal App Leaked NASA Staff and Project Sensitive data
The LightSpy threat actor exploited publicly available vulnerabilities and jailbreak kits to compromise iOS devices.…
White House National Cyber Director, CEOs, Key Financial Services Companies, Congressional and Executive Branch Experts…
Cybersecurity experts have identified a new Remote Access Trojan (RAT) named PySilon. This Trojan exploits…
The notorious Konni Advanced Persistent Threat (APT) group has intensified its cyber assault on organizations…
Google has updated its Chrome browser, addressing critical vulnerabilities that posed potential risks to millions…
WrnRAT is a new malware attack that cybercriminals have deployed by using popular gambling games…