Fidelity National Financial reports 1.3 million consumers potentially affected by a November 2023 incident

Fidelity National Financial, the title insurance and transaction services group, disclosed on November 21, 2023 that a cybersecurity incident had affected some of its systems and that blocking access to contain it had disrupted title, escrow and mortgage services. Its amendments dated awareness to November 19 and containment to November 26.

Original filing

FNF said an unauthorized third party had accessed systems and acquired certain credentials. Its annuities subsidiary, F&G, was not affected.

Amendments

The November 30 amendment gave the dates. The January 9, 2024 amendment reported the forensic findings, completed December 13: the intruder deployed malware that does not spread on its own and took data. FNF said the last confirmed unauthorized activity was on November 20, that no customer-owned systems appeared affected, and that it had notified approximately 1.3 million potentially impacted consumers. It did not expect a material impact.

Not described

The filings do not say how the credentials were first obtained or what categories of consumer data were involved.