In 2019, First American Financial exposed around 885 million records through an insecure direct object reference (IDOR) vulnerability on its website.
Key facts
- Disclosed in 2019, exposing roughly 885 million records.
- Caused by an IDOR flaw allowing access to documents by changing a URL.
- Exposed sensitive financial and mortgage documents.
- A landmark example of a simple web-app flaw at massive scale.
The lesson
An IDOR flaw exposed hundreds of millions of financial documents. Secure development and exposure monitoring are both essential.
How DarkThreatX helps
DarkThreatX monitors the dark web for breached records, leaked credentials and exposed data tied to your organisation, so you can detect exposure early. Run a free dark web scan or explore the platform.
