The New York State Department of Financial Services (DFS) has announced that it has filed a statement of charges against the First American Title Insurance Company, in a press release. . It is the case of the DFS that First American exposed sensitive consumer personal information ('Nonpublic Information') including 'bank account numbers, mortgage and tax records, Social Security Numbers, wire transaction receipts, and drivers' license images'. The statement of charges noted that First American violated six provisions of the Cybersecurity Regulation due to a vulnerability in their information systems, leading to the exposure of consumer data that persisted for years, including months after it was discovered.