A national trade association has disclosed a data breach that allegedly took place following a successful phishing attack.
On 3 July, the American Land Title Association (ALTA) said that the security incident affected title and settlement company usernames and passwords. It also noted that it first learned about the data breach on social media. As quoted in its security alert:
A person claiming to be an ethical hacker contacted ALTA via Twitter and provided files that contain approximately 600 data entries consisting of domain identification, IP addresses, usernames and passwords. The data contains information for non-title companies as well.