Title Guaranty Company of Lewis County Hit by Ransomware Attack, Exposing Sensitive Customer Data
Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cyberattack on Title Guaranty Company of Lewis County, a Washington-based title and escrow firm. The breach, discovered on December 26, 2025, involved unauthorized access to internal systems between December 24 and 26, 2025.
The company, which provides title, escrow, and real estate settlement services in Lewis County and across Washington, operates from its Chehalis office and employs around a dozen staff. Upon detecting the intrusion, Title Guaranty secured its systems, engaged external IT consultants, and notified the FBI.
On January 18, 2026, the ransomware group Sinobi claimed responsibility, asserting they had exfiltrated 50 GB of sensitive data, including financial records, customer information, and contracts. The group threatened to publish the data within seven days. By January 26, 2026, Title Guaranty began notifying affected individuals, confirming the exposure of full names, Social Security numbers (or EINs), and driver’s license details. The total number of impacted individuals remains unspecified.
The incident underscores the growing threat of ransomware attacks targeting smaller financial and real estate service providers, with potential long-term risks for affected customers.
Source: https://www.claimdepot.com/investigations/title-guaranty-company-data-breach-2026
ABSTRACT & TITLE GUARANTY CO cybersecurity rating report: https://www.rankiteo.com/company/abstract-&-title-guaranty-co
"id": "ABS1770199604",
"linkid": "abstract-&-title-guaranty-co",
"type": "Ransomware",
"date": "12/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Real Estate, Financial Services',
'location': 'Chehalis, Washington, USA',
'name': 'Title Guaranty Company of Lewis County',
'size': '~12 employees',
'type': 'Title and Escrow Firm'}],
'customer_advisories': 'Notifications sent to affected individuals',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': ['Full names',
'Social Security '
'numbers (or EINs)',
'Driver’s license '
'details'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Financial records',
'Customer information',
'Contracts']},
'date_detected': '2025-12-26',
'date_publicly_disclosed': '2026-01-26',
'description': 'Shamis & Gentile P.A. is investigating a cyberattack on Title '
'Guaranty Company of Lewis County, a Washington-based title '
'and escrow firm. The breach involved unauthorized access to '
'internal systems, with the ransomware group Sinobi claiming '
'responsibility and exfiltrating 50 GB of sensitive data, '
'including financial records, customer information, and '
'contracts. The incident exposed full names, Social Security '
'numbers (or EINs), and driver’s license details of affected '
'individuals.',
'impact': {'data_compromised': '50 GB of sensitive data',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Sinobi'},
'references': [{'source': 'Shamis & Gentile P.A. investigation announcement'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation by '
'Shamis & Gentile P.A.'},
'response': {'communication_strategy': 'Customer notifications',
'containment_measures': 'Secured systems',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'FBI',
'third_party_assistance': 'External IT consultants'},
'threat_actor': 'Sinobi',
'title': 'Title Guaranty Company of Lewis County Hit by Ransomware Attack, '
'Exposing Sensitive Customer Data',
'type': 'Ransomware'}