HIGH EXPOSURE
Sector: Real Estate / Title Insurance
First American Financial
Targeted Breach
A glaring design flaw allowed anyone with a web browser to view sensitive mortgage documents by simply changing the document ID in the URL. Exposed wire transaction records, bank account numbers, tax records, and driving license images dating back to 2003.
Total Assets Compromised
885 Million Records
Primary Kill Chain Vector
Insecure Direct Object Reference (IDOR)
Incident Timeline Marker
May 2019
Could your infrastructure sustain the same vector?
The exact techniques used in the First American Financial breach are being commoditized on dark web forums. Run our simulated intelligence recon to calculate your immediate blast radius exposure in the Real Estate / Title Insurance sector.
Run Blast Radius CalculatorSecure Tool • No Card Required