First American Financial reports cyber incident with data exfiltration and encryption; systems isolated Dec 20.

First American Financial Corp

Dec 20, 2023: Company isolated systems from Internet upon detecting unauthorized activity on IT systems.
Perpetrator accessed systems, exfiltrated data, and encrypted data on certain non-production systems.
Company retained leading experts, worked with law enforcement, and notified regulatory authorities.
Incident contained as of filing date; restoration of systems and normal operations ongoing.
Financial impact assessment still underway; materiality cannot yet be determined.

Key facts

Extracted from this filing and checked against the source text.

Cybersecurity Incidents SEC 8-K Item 1.05 confidence 0.9

First American Financial Corp disclosed a cybersecurity incident: unauthorized activity on certain information technology systems; perpetrator accessed certain Company systems, exfiltrated data and encrypted data on certain non-production systems. Impact: Company is in the process of restoring access to its systems and resuming normal business operations; material impact cannot be determined yet. Materiality is still being assessed.

Nature: unauthorized activity on certain information technology systems; perpetrator accessed certain Company systems, exfiltrated data and encrypted data on certain non-production systems
Impact: Company is in the process of restoring access to its systems and resuming normal business operations; material impact cannot be determined yet
Materiality: assessing

Exact text from the filing

The Company continues to assess whether the incident will have a material impact on the Company’s financial condition or results of operations, which at this point cannot be determined.

View on SEC.gov

2 cybersecurity incidents filed in the last 30 days. Browse all cybersecurity incidents →

First American Financial Corp filing history →

Source: SEC EDGAR

accession 0000950170-23-073848

view filing index on sec.gov

view primary document

Machine-readable: JSON · Markdown · Plain text

This headline and bullets were generated automatically by deepseek-v4-flash:cloud@v2 from the public filing. Read the source on SEC.gov before relying on any specific claim. Not investment advice. See methodology for how this pipeline works.