First American Financial

Disclosed Dec 22, 202341,683 affectedConfirmed

Updated SEC filing on a material cybersecurity incident

What is known

People affected	41,683 (as reported by the organization)
Disclosed	Dec 22, 2023
Discovered	Dec 18, 2023
Happened	Dec 18, 2023
Attack	Ransomware
Data exposed	Not stated
Sector	Finance · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: First American Financial

Official noticeatg.wa.gov

Washington Attorney General breach notice: First American Financial

Official noticejustice.oregon.gov

Oregon DOJ breach notice: First American Financial

SEC filingsec.gov

First American Financial Corp Form 8-K, Item 1.05 (2023-12-22)

SEC filingsec.gov

First American Financial Corp Form 8-K/A, Item 1.05 (2023-12-29)

SEC filingsec.gov

First American Financial Corp Form 8-K/A, Item 1.05 (2024-01-12)

Official noticeago.vermont.gov

Vermont Attorney General: 2024-06-10 First American Financial Corporation Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2024 data breach report: First American Financial

Notices filed

TotalDec 22, 2023

SEC 8-KCount not stated

TotalDec 29, 2023

SEC 8-KCount not stated

TotalJan 12, 2024

SEC 8-KCount not stated

Residents of CAJun 10, 2024

California AGCount not stated

Residents of WAJun 10, 2024

Washington AG706 people

Residents of ORJun 10, 2024

Oregon DOJ41,638 people

Residents of VTJun 10, 2024

Vermont AGCount not stated

Residents of INJun 10, 2024

Indiana AG2,926 people

Other breaches at First American Financial

Website design defect exposed title insurance document imagesExposed data exposed financial details, Social Security numbers, government IDs, names and addresses. Reported to the Indiana AG.Exposed data32 affectedInsuranceUSMay 28, 2019

History of this record

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 41683by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2024-06-10-first-american-financial-corporation-data-breach-notice-consumersby backfillSource

disclosed2026-09-25

2023-12-29 to 2023-12-22by backfillSource

disclosed2026-09-25

2024-06-10 to 2023-12-29by backfillSource

title2026-09-25

empty to Updated SEC filing on a material cybersecurity incidentby backfillSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2023-12-18by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about First American Financial