2019-05-28 First American Financial Corp Cybersecurity Incident

Page last updated on May 28, 2024

First American Financial Corp initially disclosed a cybersecurity incident in an SEC 8-K filing on 2019-05-28 06:45:33 EDT.

Company Summary

First American Financial Corporation is an American financial services company which provides title insurance and settlement services to the real estate and mortgage industries.

The First American Family of Companies’s core business lines include title insurance and closing/settlement services; title plant management services; title and other real property records and images; valuation products and services; home warranty products; property and casualty insurance; and banking, trust and investment advisory services. With total revenue of $5.8 billion in 2017, the company offers its products and services directly and through agents.

In June 2010, First American Financial Corporation was established when First American split its businesses to create First American Financial Corporation which provides title and settlement services to the real estate and mortgage industry, and CoreLogic, specializing in real estate information.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date:
Disclosure Date: 2019-05-28
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2019-05-28

First American Financial Corp filed an 8-K at 2019-05-28 06:45:33 EDT
Accession Number: 0001564590-19-020528

Item 7.01 Regulation FD Disclosure.

On May 28, 2019, First American Financial Corporation issued a statement regarding its ongoing investigation into a reported information security incident. The full text of the statement is attached hereto as Exhibit 99.1.

The information in this Item 7.01, including Exhibit 99.1 hereto, is being “furnished” in accordance with General Instruction B.2 of Form 8-K. As such, this information is not deemed to be “filed” for the purposes of Section 18 of the Securities Exchange Act, or otherwise subject to the liabilities of that section, and is not incorporated by reference into any filings with the SEC unless it shall be explicitly so incorporated in such filings.

Exhibit No. 99.1

Statement, dated May 28, 2019

8-K filed on 2021-06-14

First American Financial Corp filed an 8-K at 2021-06-14 17:36:20 EDT
Accession Number: 0001564590-21-032816

Item 7.01 Regulation FD Disclosure.

First American Financial Corporation (the “Company”) has reached a settlement with the United States Securities and Exchange Commission (the “SEC”) in connection with the previously disclosed information security incident that occurred during the second quarter of 2019 and which was the subject of the Wells Notice disclosed by the Company in October 2020. Under the terms of the settlement, which resolves the matter, the Company consented to the entry of an order finding a violation of Rule 13a-15 of the Securities Exchange Act of 1934, which requires issuers of registered securities to maintain effective disclosure controls. No other violations of the securities laws are alleged in the order. The order requires the Company to pay a civil penalty of $487,616 and to cease and desist from committing or causing any violations of Rule 13a-15. The Company neither admits nor denies the findings in the order, other than with respect to the SEC’s jurisdiction.

Company Information