Hack Brief: 885 Million Sensitive Financial Records Exposed Online

After a solid decade of nonstop corporate data breaches and exposures, you'd think large organizations would have at least fixed the most basic and obviously damaging types of data mishandling. But there's clearly still a long way to go. On Friday, independent security journalist Brian Krebs revealed that the real estate and title insurance giant First American had 885 million sensitive customer financial records, going back to 2003, exposed on its website for anyone to access. And while there isn't currently evidence that anyone actually found and stole the information, it was so easy to grab—and so obviously valuable to scammers—that it's hard to rule out that possibility.

The Hack

Krebs reports that the exposed records included Social Security numbers, driver's license images, bank account numbers and statements, mortgage and tax documents, and wire transaction receipts—an absolute treasure trove for any scammer or identity thief. An attacker who figured out the format of the company's document URLs could have input any "record number" they wanted—beginning with "000000075," according to Krebs—and pull up the documents associated with that customer case. First American took down the site that populated the records at 2 pm ET on Friday. Krebs notified the company of the situation earlier this week.

“First American has learned of a design defect in an application that made possible unauthorized access to customer data," the company said in a statement. "The company took immediate action to address the situation and shut down external access to the application. We are currently evaluating what effect, if any, this had on the security of customer information. We will have no further comment until our internal review is completed.”


Latest Discounts
  • Make Money Online With This Method 100 GUARENTEED.
  • With the help of this software, you can achieve financial freedom and live the life that you desire.
  • This file can easily help increase the sales and profits from letters in just minutes.
  • Unlock the secrets of mind-blowing orgasms
  • You'll receive marketing lessons, which helped hundreds of people start their on-line businesses.
  • Click Here to Discover the Secret Survival Technique You Probably Never Thought About.
  • Over 350 Companies Ready To Hire Take Online Surveys for Cash.
  • Are you frustrated that your expensive karoke player does not let you play.
  • Learn How to Make 100,00 a Year Online Without Personally Selling Anything.
  • Over 17,000 Online Activities In Maths, Reading and Word Skills For Students Aged 4-15
  • The fastest and easiest way to learn piano or keyboard With 200 Video lessons And 500 Audio lessons.
  • Use these proven tactics to seduce the man of your dreams
  • Webinar starting RIGHT NOW (join fast) 1,820 a DAY
  • Eve Online's Richest Player Reveals All His Techniques Making Billions
  • Get paid to write articles, blog posts, ebooks and many more.
  • Start Earn Online From Home Learn How To Choose a Niche, Get a Website and Make Money From It.
  • Clickbank Ads
     

    First American did not answer questions from WIRED about how long the records were exposed online. The company says it has hired a forensic firm to assess whether customer data was ever stolen. First American, which is based in Santa Ana, California, is a Fortune 500 company with more than 18,000 employees.

    Who's Affected

    Well, lots of people! First American is the top title insurance firm in the United States, which means the company is often party to both the buyer and lender sides of real estate transactions across the country. And the detailed financial and personal information involved in closings potentially involves information about both buyers and sellers.

    While the hope is that the data was never actually stolen, millions of people may have been impacted if it was. If you've bought or sold a house in the past several years, there's a decent chance First American had a hand in it.

    How Serious Is This?

    The First American exposure is a major incident, because it underscores just how little progress many institutions have made on locking down customer data. Perfect security is impossible, but the stakes are incredibly high and many large organizations still overlook basic errors.

    The good news is that exposed data does not necessarily mean stolen data. There's a chance that no one stumbled across this trove before the company had the chance to secure it. But unlike other data leaks of similar scale, which largely involve password and username combinations, the data in the First American haul would have devastating long-term consequences for potential victims.

    If you’re a First American customer or think you were party to a transaction that also involved the company there isn’t a lot you can do to protect yourself against the possibility that your data was stolen as a result of this exposure. But watch your bank and credit card statements for suspicious activity. Consider purchasing credit monitoring or, better yet, avail yourself of a free credit monitoring offer from another security incident your data was involved in. By this point, you've almost certainly qualified for it. You can also consider a credit freeze.

    Security practitioners always hope that major security incidents, like the notorious Equifax breach, will be a wake up call to all companies. But the consequences for such missteps are only first starting to appear. On Wednesday, for example, Moody’s downgraded its ratings outlook for Equifax. A spokesperson said, “It’s the first time that cyber has been a named factor in an outlook change." Until other dramatic economic motivators emerge, disasters like First American, or worse, will continue.


     

    Original Article : HERE ; The Ultimate Survival Food: The Lost Ways

     


    RELATED PRODUCTS
  • Make Money Online With This Method 100 GUARENTEED.
  • With the help of this software, you can achieve financial freedom and live the life that you desire.
  • GOOGLE SHOOTER THE EASIEST WAY TO MAKE MONEY ONLINE
  • Learn How to Make 100,00 a Year Online Without Personally Selling Anything.
  • Get paid to write articles, blog posts, ebooks and many more.
  • Learn The Steps Of Sales So You Can Successfully Sell Your First Online Product.
  • Packed full of the info you need for profitable horse racing
  • Click Here to Discover the Secret Survival Technique You Probably Never Thought About.
  • Learn How To play Violin. No Matter Where You Live Or When Good Teachers Are Hard To Find.
  • Get Instant Access To The video's, that will teach you to love your body and love your life
  • Eve Online's Richest Player Reveals All His Techniques Making Billions
  • Make Money With YOUR OWN Online Business.
  • 50 SEO Tools including XML Sitemap Generator, Plagiarism Checker, Article Rewriter and more.
  • Clickbank Ads