Ransome attacks have become an increasingly common and devastating threat to businesses worldwide. A recent example that highlights the severity of these attacks is the cyberattack on Fidelity National Financial (FNF), a major player in the real estate services industry, and North America’s largest title insurance company.

The Fidelity National Financial Incident

On November 17,2023, FNF experienced a significant cybersecurity incident, which was later confirmed to be a ransomware attack orchestrated by the notorious AlphV/BlackCat ransomware gang. The attack forced FNF to shut down key systems, causing disruptions in title insurance, escrow, and mortgage transaction services. This incident not only impacted FNF’s operations but also created confusion and concern among homeowners and prospective buyers engaged with FNF and its subsidiaries.

The Impact on Customers and the Business

Customers experienced direct consequences, with significant delays and lack of access to services. One customer, who sold a house using FNF’s services, expressed frustration at not being able to reach the company and uncertainty about the status of her transaction. FNF, in response to the attack, blocked access to some of its systems, which added further complications to its service offerings.

The Ransomware Threat

The ALPHV (or BlackCat) ransomware gang, known for its sophisticated attacks, claimed responsibility for the FNF cyberattack. This incident serves as a stark reminder of the growing sophistication and frequency of ransomware attacks, which have evolved to target large and small businesses alike. In fact, many small and medium businesses are forced to close after such attacks, highlighting the severe impact these can have.

Mitigation and Response Strategies

To combat such threats, experts like Joe McMann from Binary Defense recommend increased vigilance against social-engineering attacks and educating employees about suspicious behavior. Companies are advised to implement processes that make breaches harder, such as multi-factor authentication and scrutinizing password reset and account creation protocols. Additionally, the principle of “segregation of duties” is crucial to mitigate internal threats and limit damage in case of external breaches. Companies should also have a response plan in place, as demonstrated by FNF, which shut down systems and scrubbed servers to contain the damage.

The Fidelity National Financial ransomware attack serves as a cautionary tale for all businesses. It highlights the necessity of robust cybersecurity measures, employee education, and prepared contingency plans to mitigate the risks of such attacks. As a managed service provider, emphasizing these aspects to your clients is crucial in today’s digital landscape, where the threat of ransomware looms large.