The American Land Title Association (ALTA) has updated an alert of a breach which revealed non-public personal information.
ALTA said its information technology department was examining the information provided by a person claiming to be an ethical hacker.
A person claiming to be an ethical hacker contacted ALTA via Twitter and provided files that contain approximately 600 data entries consisting of domain identification, IP addresses, usernames and passwords.
There are no signs that the credentials are still active or how they were obtained.
Source: https://www.thetitlereport.com/Articles/ALTA-warns-title-companies-of-industry-breach-76585.aspx
TPRM report: https://scoringcyber.rankiteo.com/company/american-land-title-association
"id": "ame16451423",
"linkid": "american-land-title-association",
"type": "Breach",
"date": "07/2019",
"severity": "25",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'industry': 'Real Estate',
'name': 'American Land Title Association (ALTA)',
'type': 'Organization'}],
'attack_vector': 'Unknown',
'data_breach': {'number_of_records_exposed': 600,
'sensitivity_of_data': 'Non-public Personal Information',
'type_of_data_compromised': ['Domain identification',
'IP addresses',
'Usernames',
'Passwords']},
'description': 'A person claiming to be an ethical hacker contacted ALTA via '
'Twitter and provided files containing approximately 600 data '
'entries consisting of domain identification, IP addresses, '
'usernames, and passwords.',
'impact': {'data_compromised': ['Domain identification',
'IP addresses',
'Usernames',
'Passwords']},
'investigation_status': 'Ongoing',
'motivation': 'Ethical Disclosure',
'threat_actor': 'Ethical Hacker',
'title': 'ALTA Data Breach Incident',
'type': 'Data Breach'}