First American, a major insurance company in the US, has confirmed that a ransomware attack led to the loss of sensitive data for thousands of people.
The cyber-attack, which occurred in late December 2023, forced First American to shut down some systems, including its website.
The company later reported to the US Securities and Exchange Commission that ransomware had compromised its systems and likely resulted in the theft of sensitive information.
On May 28, the company filed an updated report indicating the conclusion of its investigation.
It determined that the personal information of approximately 44,000 individuals was accessed without authorization.
First American said it would notify the affected individuals and provide them with free credit monitoring and identity protection services.
The attackers' identities and the specific data stolen remain unknown.
This approach helps mitigate the risk of data breaches and ensures that even if data is intercepted, it remains unusable to unauthorized parties.
The updated SEC filing comes weeks after Prudential Financial notified 36,000 individuals of a data breach.
This Cyber News was published on www.infosecurity-magazine.com. Publication date: Thu, 30 May 2024 15:35:11 +0000