Fidelity National Financial Confirms Data Breach Affecting 1.3 Million Customers

Fidelity National Financial (FNF), a major player in real estate services, disclosed a data breach during a cyberattack in November. The company confirmed that hackers stole data on 1.3 million customers, leading to a week-long outage.

Details of the Breach

According to FNF’s filing with federal regulators, an unauthorized third party accessed certain FNF systems deployed non-self-propagating malware and exfiltrated specific data. 

The company has not specified the nature of the stolen data but has initiated measures to notify affected customers, state attorneys general, and regulators.

Response and Mitigation Efforts

FNF is actively addressing the aftermath of the cyberattack by providing credit monitoring and identity theft services to impacted customers. 

This indicates that the stolen information is likely to be personal or sensitive. The breach has been contained, and FNF resumed operations on November 26 after a week of disruptions.

Ransomware Gang Involvement

The ransomware gang identified as ALPHV (or BlackCat) claimed responsibility for the cyberattack on FNF. 

Such groups often use dark web leak sites to extort victims by threatening to release or delete the stolen data unless a ransom is paid. 

ALPHV initially announced its involvement but later removed FNF from its dark web platform.

Broader Trend in Cyberattacks

The FNF breach is part of recent cyberattacks targeting the mortgage and loan industry. 

Other companies in the sector, such as LoanDepot and Mr. Cooper, have also fallen victim to cyber incidents in recent weeks.