The New York State Department of Financial Services announced a USD1 million cybersecurity settlement with First American Title Insurance Company for violating cybersecurity regulation 23 NYCRR Part 500. The DFS claimed First American did not "maintain and implement effective governance and classification, access controls and identity management, and risk assessment policies and procedures" leading to a large-scale data breach in 2019.