The Infinite Brief

The data, which includes bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers license images, were available without authentication to anyone with a Web browser.

Anyone who knew the URL for a valid document at the site could view other documents just by modifying a single digit in the link.

Research indicates that First American’s site exposed approximately 885 million files, the earliest dating back more than 16 years. No authentication was required to read the documents.