AbstractorPro (Real Title Services)
Register
Log In
Forget your Password?

Home
Directory
Bulletins
Forums
Blogs
Articles
Links
Classifieds
About Us
Contact Us
Advertise
FAQ
Privacy Policy


NY DFS Announces $1 Million Cybersecurity Settlement with First American Title Insurance Company
press release, NY Dept. of Financial Services
   

The New York State Department of Financial Services (DFS) today announced that First American Title Insurance Company (First American) will pay a $1 million penalty to New York State for violations of DFS’s Cybersecurity Regulation (23 NYCRR Part 500) stemming from a large-scale cybersecurity breach in May 2019. The breach contributed to the exposure of consumers’ nonpublic information. In addition to penalties, the company has agreed to implement significant remedial measures to better secure consumer data.

As the nation’s second-largest title insurance company, First American collects the personal and financial data of hundreds of thousands of individuals annually on title-related documents and stores that information in its proprietary EaglePro application. In May 2019, First American senior management learned of a vulnerability in the application whereby any individual in possession of the link used to access EaglePro could access not only their own documents without authentication, but also those of individuals in unrelated transactions.

DFS’s investigation found that, in violation of the Department’s Cybersecurity Regulation, First American failed to maintain and implement effective governance and classification, access controls and identity management, and risk assessment policies and procedures. As a result, EaglePro lacked sufficient access controls designed to prevent unauthorized users from gaining access to consumers non-public information.

DFS’s Cybersecurity Regulation became effective in March 2017, and it has served as a model for other regulators, including the U.S. Federal Trade Commission, multiple states, the National Association of Insurance Commissioners (NAIC), and the CSBS Nonbank Model Data Security Law. In November of this year, after consultation with industry stakeholders, DFS Superintendent Adrienne A. Harris adopted amendments to the Cybersecurity Regulation designed to enhance cyber governance, mitigate risks, and strengthen protections for New York businesses and consumers against cyber threats.

To review the First American consent order, visit the DFS website<.



to post a comment on this article: login - or - register



Directory

The Source of Title Business directory has 8825 listed companies.

Leave feedback on a company:
SOT ID #:  learn more...
DRN Title Search
Blogs

Read other users' blogs-- or start your own!

Most Recent Blog Posts:

Behind the Deed: Exploring the Intricacies of Complex Real Estate Title Searches
Security American's Blog
2024/02/15
0 comments

The Dance of Interest Rates and Real Estate: A Symbiotic Relationship
Security American's Blog
2023/12/27
0 comments

Raise Your Prices and Reduce Your Costs
Denise Williams's Blog
2023/11/14
0 comments

Forums

Source of Title's Forums are the place for title industry discussions.
Recent posts in the forums:



Classifieds

Buy, sell, or trade! Browse the ads or post your own!

© 2020, Source of Title.