Title Insurer Exposed Sensitive Mortgage Docs, New York Says (2)

First American Title Insurance Co. failed to safeguard mortgage documents, including bank account numbers and other personal information, New York’s financial regulator said in its first enforcement action under its cybersecurity rules.

The New York Department of Financial Services filed administrative charges Tuesday alleging the title insurer didn’t fix a flaw in an online data storage platform despite being made aware of it in December 2018. The vulnerability allowed unauthorized users to get access to restricted documents simply by changing a digit in a URL, the DFS said.

First American said it “strongly disagrees” with the enforcement action. A review ...