In the first cybersecurity enforcement action filed by the department since it adopted its cybersecurity regulation in 2017, the New York State Department of Financial Services announced cybersecurity charges against First American for exposing millions of documents with consumers’ personal information.
The state alleges First American’s data incident from 2019 exposed hundreds of millions of documents, millions of which contained consumers’ sensitive personal information including bank account numbers, mortgage and tax records, Social Security Numbers, wire transaction receipts, and drivers’ license images.
Read on for more details.