Dive Brief:
- Fidelity National Financial said it contained a previously disclosed cyberattack and is resuming normal business operations, according to an amended filing with the Securities and Exchange Commission.
- After discovering the attack on Nov. 19, the company blocked access to certain systems and launched an investigation with the help of outside forensics experts, the company said.
- The incident was contained Sunday and a restoration of normal business operations is underway with customers, the company said. Fidelity National Financial cautioned it is still assessing the incident and determining if it will have a material impact.
Dive Insight:
The Jacksonville, Florida-based firm is still working with security experts to get a complete understanding of the attack.
In a prior SEC filing, Fidelity officials said unauthorized third parties gained access to certain company systems and exfiltrated credentials. The full scope of the data theft has not been disclosed.
Fidelity is one of the nation’s largest title insurance firms and reported revenue of $2.8 billion in the third quarter.
The prolific AlphV/BlackCat ransomware group, linked to the September attacks on Caesars Entertainment and MGM Resorts, claimed responsibility for the attack on Fidelity. The company said it notified regulators and law enforcement authorities.
