The website for real estate title insurance giant First American Financial Corp. leaked hundreds of millions of documents related to mortgage deals going back to 2003.
The data, which includes bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers license images, were available without authentication to anyone with a Web browser.
Anyone who knew the URL for a valid document at the site could view other documents just by modifying a single digit in the link.
Research indicates that First American’s site exposed approximately 885 million files, the earliest dating back more than 16 years. No authentication was required to read the documents.