# Cyber attack FNF conglomerate

**URL:** <https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099>\
**Category:** Uncategorized\
**Created:** [November 27, 2023, 8:51pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099 "2023-11-27T20:51:30Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 27, 2023, 8:51pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/1 "2023-11-27T20:51:30Z")

</div>

Brace yourself before you read this. Did ya’ll hear about the FNF cyber attack? see attached article  
 ![TrollsOhSnapGIF](https://canada1.discourse-cdn.com/flex034/uploads/notarycafe/original/3X/2/7/27e257ddc54c30674407397b34df393abc1c7d64.gif)

[https://www.securityweek.com/fidelity-national-financial-takes-down-systems-following-cyberattack/](https://www.securityweek.com/fidelity-national-financial-takes-down-systems-following-cyberattack/)

---

<div class="post-metadata">

**Author:** ![SteveU](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@SteveU](https://forum.notarycafe.com/u/SteveU)\
**Post date:** [November 27, 2023, 9:17pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/2 "2023-11-27T21:17:58Z")

</div>

Thanks for the info.  
Such a shame!!  
Feels like everything shut down.  
😡

---

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 27, 2023, 9:19pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/3 "2023-11-27T21:19:56Z")

</div>

I’m hoping and praying that they will get it taken care of as soon as possible because how many other signing services would be affected by this?

---

<div class="post-metadata">

**Author:** ![Arichter](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/arichter/32/35077_2.png) [@Arichter](https://forum.notarycafe.com/u/Arichter)\
**Post date:** [November 27, 2023, 9:29pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/4 "2023-11-27T21:29:44Z")

</div>

Thanks for the info. Kinda suspected it was something like this. Now I know. It’s gonna be a while.

---

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 27, 2023, 10:29pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/5 "2023-11-27T22:29:11Z")

</div>

This is just terrible, but I guess now I can focus on being a musician

---

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 28, 2023, 7:25am UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/6 "2023-11-28T07:25:10Z")

</div>

This also affect title companies directly

---

<div class="post-metadata">

**Author:** ![t.orth](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/t.orth/32/33960_2.png) [@t.orth](https://forum.notarycafe.com/u/t.orth)\
**Post date:** [November 28, 2023, 7:33am UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/7 "2023-11-28T07:33:30Z")

</div>

See ServiceLink thread which also covers some potential impacts across SSS and lenders as well as possibly sensitive PI infirmation that may be affected by this situation.

---

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 28, 2023, 7:41am UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/8 "2023-11-28T07:41:49Z")

</div>

My question is: once these signing services get back up online, how will they pay us notaries? Will they mail us checks? Will we have to wait until FNF figures out their foolishness? freaking crap!!! rant over.

---

<div class="post-metadata">

**Author:** ![cNsa5](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/cnsa5/32/33381_2.png) [@cNsa5](https://forum.notarycafe.com/u/cNsa5)\
**Post date:** [November 28, 2023, 8:09am UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/9 "2023-11-28T08:09:06Z")

</div>

@jennjoneis Thank You for sharing the information with us. 🙏

You’ve posed interesting queries. At this point, I don’t know . . .

🦢

P.S. " Several real estate-focused news outlets said the attack has had significant downstream effects on the industry. Real Estate News called Fidelity National Financial the “nation’s largest title insurance company” and said it has [stopped many scheduled home-sale closings](https://www.realestatenews.com/2023/11/21/hack-at-nations-largest-title-company-stalls-closings) as a result of the attack.

Real estate agents, homebuyers and more have been left in the lurch, trying to find ways to finish sales. But the system outages mean many transactions will not be completed until this week. TechCrunch [spoke to several realtors](https://techcrunch.com/2023/11/27/ransomware-catastrophe-at-fidelity-national-financial-causes-panic-with-homeowners-and-buyers/) on Monday who were exasperated by the outages, which are causing delays in closings.

Fidelity National Financial [owns dozens of regional title companies](https://twitter.com/GossiTheDog/status/1727819855523684465) like National Title of New York, Chicago Title, Alamo Title and Commonwealth Land Title. TechCrunch

Cybersecurity expert Kevin Beaumont [noted](https://twitter.com/GossiTheDog/status/1727428812793852152) that like [multiple](https://therecord.media/toyota-cyberattack-financial-services-divison) major [companies](https://therecord.media/boeing-investigating-leaked-lockbit-data) that have [suffered hacks](https://therecord.media/icbc-dealing-with-ransomware-attack) in recent weeks, Fidelity National Financial had tools exposed to the internet that were vulnerable to a bug known as [CitrixBleed](https://therecord.media/tag/cve-2023-4966).

The top cybersecurity agencies in the U.S. [released an urgent warning](https://therecord.media/citrix-bleed-bug-targeted-cisa) about the issue on November 21, warning that both nation-state hackers and cybercriminals were exploring ways to exploit the vulnerability.

Just three weeks ago, hackers [targeted Texas-based mortgage giant Mr. Cooper](https://therecord.media/mortgage-giant-mr-cooper-cyberattack), the largest non-bank mortgage servicer in the U.S. The attack prompted the company to lock down its systems, forcing people to pay off their loans by phone, mail service or Western Union."

SOURCE: [Notorious ransomware gang takes credit for cyberattack on Fidelity National Financial](https://therecord.media/fidelity-national-financial-ransomware-alphv-black-cat)

---

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 28, 2023, 1:01pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/10 "2023-11-28T13:01:55Z")

</div>

cNsa5 Thanks for the info. I have two signing scheduled for tomorrow,  
but I want to ask title if they can pay me directly instead of through the signing service  
since they depend on FNF I’m thinking about telling them I can’t do it since I don’t know if I will get paid, or when I would get paid…

---

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 28, 2023, 2:14pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/11 "2023-11-28T14:14:32Z")

</div>

maybe in this situation I can get the full fee for once

---

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 28, 2023, 4:03pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/12 "2023-11-28T16:03:39Z")

</div>

YALL REALITY CHECK TIME: CHICAGO TITLE IS DOWN! Thanks FNF

---

<div class="post-metadata">

**Author:** ![ashton](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/ashton/32/35076_2.png) [@ashton](https://forum.notarycafe.com/u/ashton)\
**Post date:** [November 28, 2023, 4:17pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/13 "2023-11-28T16:17:57Z")

</div>

Wild speculation: I wonder if cleaning up this mess might mean some full-fee appointments for notaries, perhaps from local lawyers who are taking on closings that otherwise would have been done by national title companies.

---

<div class="post-metadata">

**Author:** ![slcaldwell201](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/slcaldwell201/32/34413_2.png) [@slcaldwell201](https://forum.notarycafe.com/u/slcaldwell201)\
**Post date:** [November 28, 2023, 7:24pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/14 "2023-11-28T19:24:38Z")

</div>

I was just saying to another notary the other day that Bancserv updated their portal a few months back! I thought to get ahead of such, but I guess not, unless some bug was planted during that upgrade time!!!🤔 well good luck Notaries!!! Stay safe!! Well, now I’ll be on my primary business in shipping helping Santa move pkgs from here to there

---

<div class="post-metadata">

**Author:** ![LindaH-FL](https://avatars.discourse-cdn.com/v4/letter/l/8baadc/32.png) [@LindaH-FL](https://forum.notarycafe.com/u/LindaH-FL)\
**Post date:** [November 28, 2023, 8:11pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/15 "2023-11-28T20:11:03Z")

</div>

If any of the lawyers write policies for FNF or its affiliates (like we used to do in CT) then … No…no loans are going to move without title insurance.

---

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 28, 2023, 9:11pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/16 "2023-11-28T21:11:58Z")

</div>

This is beyond Bancserv. It has the potential to affect all closings. FNF has there hand in so many aspects of this business. A signing I had scheduled for tomorrow has been postponed due to some aspect in the FNF fiasco. (The broker called to let me know)

---

<div class="post-metadata">

**Author:** ![jennifer.shaffor](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennifer.shaffor/32/33589_2.png) [@jennifer.shaffor](https://forum.notarycafe.com/u/jennifer.shaffor)\
**Post date:** [November 29, 2023, 3:59pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/17 "2023-11-29T15:59:56Z")

</div>

Thank you for the post. Ive been doing a lot of Mr. Coopers and wondered why i havent seen anything for them lately

---

<div class="post-metadata">

**Author:** ![mrj](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/mrj/32/33817_2.png) [@mrj](https://forum.notarycafe.com/u/mrj)\
**Post date:** [November 29, 2023, 4:51pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/18 "2023-11-29T16:51:01Z")

</div>

Everything shut down as of last Tuesday. I posted this in several of the Notary groups on Facebook yesterday morning, this cyber attack involves any and all FNF Companies and their affiliates. To include life insurance and annuity customers as well as the mortgage and lending industry. This is massive something they’re gonna have to really fix and relaunch with probably a whole lot of layered authentications for accessibility

---

<div class="post-metadata">

**Author:** ![jennjoneis](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/jennjoneis/32/34972_2.png) [@jennjoneis](https://forum.notarycafe.com/u/jennjoneis)\
**Post date:** [November 29, 2023, 5:01pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/19 "2023-11-29T17:01:29Z")

</div>

Oh my gosh. I’m starting to wonder if the whole thing was on purpose. If so I can’t help but say it was a tactical move like the construction guy that demolishes a building with such mastery and skill that it all goes down efficiently without loud noises, and hardly any dust  
 ![DemolitionCrashGIF](https://canada1.discourse-cdn.com/flex034/uploads/notarycafe/original/3X/2/e/2e782194af31b0aca33f5a06ed217cba9d514cae.gif)

---

<div class="post-metadata">

**Author:** ![mrj](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.notarycafe.com/mrj/32/33817_2.png) [@mrj](https://forum.notarycafe.com/u/mrj)\
**Post date:** [November 29, 2023, 5:21pm UTC](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099/20 "2023-11-29T17:21:34Z")

</div>

Well, of course, I have my own preconceived notions about what this is all about but I don’t like to politicize in these forums or on social media. Bottom line is that it is out of my control and everybody else’s so we just have to sit wait and hope that it is resolved and restored to a much better and more secure capacity.

[Next page](https://forum.notarycafe.com/t/cyber-attack-fnf-conglomerate/43099.md?page=2)
