Dive Brief:
- A cyberattack targeting Fidelity National Financial led to disruptions across its services, including title insurance and mortgage transactions, after it was forced to block access to certain systems, the company said last week in a filing with the Securities and Exchange Commission.
- An investigation showed an unauthorized third party gained access to some of its systems and stole certain credentials, the company said.
- The threat group known as AlphV/BlackCat claimed responsibility for the attack, according to security researcher Dominic Alvieri.
Dive Insight:
AlphV/BlackCat is on a tear, implicated in the social engineering attacks against MGM Resorts and Caesars Entertainment, in tandem with Scattered Spider.
Their recent wave of social-engineering attacks involved tricking call center workers in order to bypass multifactor authentication. However, it is not immediately clear how Fidelity National Financial was initially breached.
The company said it was working diligently to address the incident and figure out how to restore services as quickly as possible. The firm said it was also working to determine whether the incident would have a material impact on its operations.
The Jacksonville, Florida-based firm said it retained outside forensic experts and contacted law enforcement. The attack did not impact its majority-owned insurance services business F&G Annuities & Life, the company said.
Fidelity National Financial is one of the nation’s largest title insurance companies. It reported $2.8 billion in gross revenue and net earnings of $426 million during the third quarter.
Earlier this month, Fidelity National Financial announced plans to invest $250 million in F&G, a business it owned 85% of as of Sept. 30.
The Fidelity National Financial website continued to generate error messages on Monday morning.
A spokesperson for Fidelity National Financial was not immediately available for comment.
