New York Fines First American $1 Million for Cyber Breach (1)

New York’s top financial industry regulator fined a First American Financial Corp. unit $1 million for concealing cybersecurity vulnerabilities.

First American Title Insurance Co., the nation’s second-largest title insurance company, knew its systems exposed customers’ private information as far back as December 2018, but didn’t fully investigate or report the defects until months later, the New York State Department of Financial Services said in a Monday consent order.

First American violated the department’s cybersecurity governance regulation, the regulator said. “Risk Assessments constitute a core component of a robust cybersecurity program,” the order said.

First American sells insurance policies to ...