"Cyberattack Disrupts Operations of First American, Subsidiaries"

The systems and operations of First American Financial Corporation and several of its subsidiaries appear to have been significantly disrupted by a cyberattack. First American provides title insurance and settlement services to the real estate and mortgage industries. It’s one of the largest title insurance companies in the United States. On December 21st, the company revealed that it had taken certain systems offline as a result of a “cybersecurity incident.” In an update shared the next day, the company said email systems had also been taken offline and warned customers to be on the lookout for potentially malicious emails purporting to come from First American, First American Title, or FirstAm.com. One week after the breach was discovered, First American’s main website remains offline, and so are the sites of a few subsidiaries. While no information has been shared on the attack itself, the incident has the hallmarks of a ransomware attack, but no known ransomware group appears to have taken credit for it.

SecurityWeek reports: "Cyberattack Disrupts Operations of First American, Subsidiaries"