California: Leading real estate title insurance firm, First American Financial Corporation, exposed crucial client data going back to 2003, thanks to a security loophole in its website.
As KrebsonSecurity explains, a bug in the website allowed unauthorized access to the digitized records of anyone who has been sent a document link via email by simply modifying a single digit in the link, exposing as many as 885 million real estate documents.
These digitized records include bank account numbers and statements, mortgage and tax records, social security numbers, wire transaction receipts, and drivers license images. First American fixed the security loophole after learning about it.
[source_without_link]ANI[/source_without_link]