October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
The Finance Base
The Money Desk · Blog
Re:

Fidelity National Financial Cyberattack: What Happened and What Was Affected

FNF blocked access to some systems after a November 2023 cyber incident, disrupting title, escrow and mortgage services. Its later filing reported data exfiltration and approximately 1.3 million potentially impacted consumers.
From TheFinanceBase Team3 min to read
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Fidelity National Financial (FNF), a title and real-estate services company—not Fidelity Investments—blocked access to some systems after discovering a cyber incident in November 2023. The move disrupted title insurance, escrow, mortgage transaction and related technology services. FNF later reported that attackers accessed certain systems, deployed malware and took some data; it identified approximately 1.3 million consumers as potentially impacted, not as confirmed identity-theft victims.

Why FNF took systems offline

FNF said it became aware of the incident on November 19, 2023. In its initial SEC disclosure, filed November 21, the company said it blocked access to certain systems to assess and contain the incident. Those measures caused varying levels of disruption to its businesses.

The affected areas FNF identified included title insurance, escrow and other title-related services, mortgage transaction services, and technology for the real-estate and mortgage industries. FNF said its majority-owned subsidiary F&G Annuities & Life was not impacted. The company is distinct from Fidelity Investments.

What FNF later established about the incident

The November disclosure said an unauthorized third party had accessed certain FNF systems and acquired credentials, while the investigation was still underway. In an amendment filed January 9, 2024, FNF reported the results of its completed forensic investigation: an unauthorized third party accessed certain systems, deployed malware described by FNF as “not self-propagating,” and exfiltrated certain data. FNF said the last confirmed date of unauthorized activity in its network was November 20.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

FNF also said it had no evidence that customer-owned systems were directly impacted, and that no customer had reported such an impact. That finding is narrower than saying no customer information was affected: FNF separately reported that data was taken from certain FNF systems.

Incident and recovery timeline

  • November 19, 2023: FNF became aware of a cybersecurity incident affecting certain systems.
  • November 21, 2023: In its initial SEC filing, FNF disclosed that it had blocked access to some systems, disrupting services, and reported unauthorized access and acquired credentials while the investigation continued.
  • November 26, 2023: FNF later said the incident was contained.
  • December 13, 2023: FNF said its forensic investigation was complete.
  • January 9, 2024: FNF filed an amendment describing its findings, consumer notifications and support, and related lawsuits.

In that January amendment, FNF said the systems it used to provide services had been restored. This records the company’s historical recovery report; it does not establish the present-day status of any particular service.

What the 1.3 million figure means

FNF said it notified approximately 1.3 million potentially impacted consumers. “Potentially impacted” is the company’s qualification: the figure is not a count of people confirmed to have experienced identity theft or fraud. FNF also said it notified affected customers, relevant state attorneys general and regulators.

The filing does not establish a total incident cost, a count of confirmed identity-theft cases, or an independently measured outage duration. It also does not confirm an attacker’s identity or a ransomware-group claim.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What support FNF reported offering

FNF said it was providing credit monitoring, web monitoring and identity-theft restoration services, and responding to consumer questions. The SEC filing does not establish that every reader or customer was eligible for those services. Anyone who received a direct notice from FNF should follow the instructions and contact details in that notice to determine what support applies.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What FNF said about business impact

In the January 2024 amendment, FNF said: “At this time, we do not believe that the incident will have a material impact on the Company.” This was management’s assessment at the time of filing, not an independently established conclusion about later financial effects or litigation outcomes.

Sources

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More post from the Money Desk

  1. The Money DeskBlogTheFinanceBase09 OCT 267 minMortgage Escrow FAQs: Taxes, Insurance, Shortages, and Refunds
  2. The Money DeskBlogTheFinanceBase09 OCT 265 minHow Mortgage Escrow Accounts Work and What Homeowners Pay For
  3. The Money DeskBlogTheFinanceBase09 OCT 265 minHow to Read a Stock Chart, Volume and Market-Cap Data
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.