Sign up for our daily briefing

Make your busy days simpler with Axios AM/PM. Catch up on what's new and why it matters in just 5 minutes.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Denver news in your inbox

Catch up on the most important stories affecting your hometown with Axios Denver

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Des Moines news in your inbox

Catch up on the most important stories affecting your hometown with Axios Des Moines

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Minneapolis-St. Paul news in your inbox

Catch up on the most important stories affecting your hometown with Axios Twin Cities

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Tampa Bay news in your inbox

Catch up on the most important stories affecting your hometown with Axios Tampa Bay

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Charlotte news in your inbox

Catch up on the most important stories affecting your hometown with Axios Charlotte

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

A web design flaw in First American Financial Corporation's document transfer system left around 885 million files exposed on the web with no security, reports independent reporter Brian Krebs.

Why it matters: Krebs notes that the documents, which date back to 2003, include "bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers license images."

Details: The flaw, which has been repaired, appears to have been in an online system the firm used to link to files in private communications. Users would be sent to a website whose web address included a file number.

  • However, the files themselves were not individually protected. By changing the file number, you could access any one of the documents.
  • Krebs was alerted to the data exposure by developer Ben Shoval.

Threat level: There's no public evidence at this point that anyone maliciously accessed the files, though First American is investigating with the help of an outside forensics firm.

What they're saying:

  • In a statement, First American wrote "Security, privacy and confidentiality are of the highest priority and we are committed to protecting our customers’ information. Therefore, the company took immediate action to address the situation and shut down external access to the application."

Go deeper

The new Washington

Illustration: Sarah Grillo/Axios

The Axios subject-matter experts brief you on the incoming administration's plans and team.

Rep. Lou Correa tests positive for COVID-19

Lou Correa. Photo: Tom Williams/CQ-Roll Call, Inc via Getty Images

Rep. Lou Correa (D-Calif.) announced on Saturday that he has tested positive for the coronavirus.

Why it matters: Correa is the latest Democratic lawmaker to share his positive test results after last week's deadly Capitol riot. Correa did not shelter in the designated safe zone with his congressional colleagues during the siege, per a spokesperson, instead staying outside to help Capitol Police.

Far-right figure "Baked Alaska" arrested for involvement in Capitol siege

Photo: Shay Horse/NurPhoto via Getty Images

The FBI arrested far-right media figure Tim Gionet, known as "Baked Alaska," on Saturday for his involvement in last week's Capitol riot, according to a statement of facts filed in the U.S. District Court in the District of Columbia.

The state of play: Gionet was arrested in Houston on charges related to disorderly or disruptive conduct on the Capitol grounds or in any of the Capitol buildings with the intent to impede, disrupt, or disturb the orderly conduct of a session, per AP.