First American Financial

Disclosed Dec 22, 20232 years ago41,683 affectedConfirmed

Updated SEC filing on a material cybersecurity incident

What is known

People affected	41,683 (as reported by the organization)
Disclosed	Dec 22, 2023
Discovered	Dec 18, 2023
Happened	Dec 18, 2023
Attack	Ransomware
Data exposed	Not stated
Sector	Finance · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: First American Financialoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: First American Financialatg.wa.gov · Official notice	Official notice
Oregon DOJ breach notice: First American Financialjustice.oregon.gov · Official notice	Official notice
First American Financial Corp Form 8-K, Item 1.05 (2023-12-22)sec.gov · SEC filing	SEC filing
First American Financial Corp Form 8-K/A, Item 1.05 (2023-12-29)sec.gov · SEC filing	SEC filing
First American Financial Corp Form 8-K/A, Item 1.05 (2024-01-12)sec.gov · SEC filing	SEC filing
Vermont Attorney General: 2024-06-10 First American Financial Corporation Data Breach Notice to Consumersago.vermont.gov · Official notice	Official notice
Indiana Attorney General 2024 data breach report: First American Financialin.gov · Official notice	Official notice

Where	Filed	People
SEC 8-Ktotal	Dec 22, 2023
SEC 8-Ktotal	Dec 29, 2023
SEC 8-Ktotal	Jan 12, 2024
California AGresidents of CA	Jun 10, 2024
Washington AGresidents of WA	Jun 10, 2024	706
Oregon DOJresidents of OR	Jun 10, 2024	41,638
Vermont AGresidents of VT	Jun 10, 2024
Indiana AGresidents of IN	Jun 10, 2024	2,926

Breach	Disclosed	Attack	Sector	Status	Affected
Website design defect exposed title insurance document imagesMay 28, 20197 years agoExposed data	May 28, 20197 years ago	Exposed data	Insurance	Confirmed	32

History of this record

2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 41683 · backfill source
2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-06-10-first-american-financial-corporation-data-breach-notice-consumers · backfill source
2026-09-25 · disclosed: 2023-12-29 to 2023-12-22 · backfill source
2026-09-25 · disclosed: 2024-06-10 to 2023-12-29 · backfill source
2026-09-25 · title: empty to Updated SEC filing on a material cybersecurity incident · backfill source
2026-09-25 · attack: unknown to ransomware · backfill source
2026-09-25 · discovered: empty to 2023-12-18 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.