Update on our recent cybersecurity incident.
Our investigation into our recent cybersecurity incident remains ongoing. As part of this investigation, we continue to work closely with independent third-party external cybersecurity professionals experienced in handling these types of incidents including a computer forensics firm.
As we have worked to restore operational systems, we have both cleaned and re-imaged endpoint devices, implemented new servers, and deployed a new corporate email solution to our staff. Main phone numbers have been forwarded to alternative numbers for our staff while we continue to restore our voice infrastructure. All business being conducted by our staff is performed in a new environment and no information or data is processed through the compromised environment while our investigation continues.
While the investigation remains ongoing, as of now, we have no evidence indicating that customer information was accessed or acquired. However, if this information changes, we will update you accordingly.
Upon completion of the investigation, if it is determined that any customer information was compromised during this incident, those parties will be notified.
While part of our team continues to work through the logistics of restoring our operations, our escrow and title teams are working tirelessly to assist you and your customers’ real estate closing needs. We are fortunate enough to have escrow, title and 1031 exchange staff that are diverse in their skill sets, and have shown the willingness to rise to the difficulty of this situation. Our team has come together to support each other, and do what needs to be done to bring you the best possible service. Our people make the difference, and they are doing so every day.
We appreciate your business, and please know that we continue to take this situation very seriously.
9/23/22 - update
Business Operations Update as of September 23, 2022.
Thank you for all the support and patience you have shown us this week. Our staff has been absolutely amazing dealing with our alternative procedures as we continue to bring our systems back online. We would like to provide you with a quick update of our current operational procedures.
IS IT SAFE TO WORK WITH YOU?
YES! We have restored our network, and all equipment and email connected to security1st.com is safe and secure.
ARE WE TAKING ORDERS?
YES! We are accepting new orders either by contacting our staff or by email at firstname.lastname@example.org.
DO WE HAVE EMAIL?
YES! We have fully restored all individual email accounts.
ARE OUR PHONES WORKING?
Phone systems continue to be affected until further notice. However, main office phone numbers have been forwarded to working numbers.
CAN WE ACCEPT EARNEST MONEY ONLINE?
YES! Our online Earnest Money portal is working and accepting digital earnest money payments at security1st.com/oem.
CAN WE CLOSE?
YES! Right now our teams are operating as business as usual. Currently, all offices are capable of assisting customers with any of their closing needs, and we do not have any delays on funding your transactions. Our teams are in the offices and ready to assist you.
HAVE MORE QUESTIONS?
We know you may have more questions regarding your transactions, please email our team at email@example.com and we will assist you.
THANK YOU FOR YOUR PATIENCE AND SUPPORT.
We appreciate your understanding as we work through this outage.
Thank you for your patience as we have been working to understand our current operational disruption.
WHAT IS HAPPENING?
We have been experiencing issues impacting the functionality of various systems. These disruptions were the result of a security incident. We want to take this time to update you on what we have learned about this incident.
We first discovered indications of a security incident that impacted our systems on Monday, September 19, 2022. Upon learning of the issue, we proactively disabled and disconnected the majority of our network to contain the incident. We immediately began an investigation and efforts to restore all of our systems and data. As part of this investigation, we are working closely with external cybersecurity professionals to assist in our investigation and restoration. This investigation and process are ongoing.
Our goals right now are to make sure our network is secure, all devices are clean, and to restore our full functionality and data. Although we are working to do this as quickly as possible, we are only bringing systems back online once we are highly confident that they are secure. Therefore, it may be 1-2 weeks before full functionality is restored. We do not at this time have any forensic evidence that the incident has resulted in the unauthorized access to, or acquisition of, personal information, but this is a focus of our investigation and we will notify you if we determine to the contrary.
CAN WE CLOSE?
Yes! Right now our teams are operating as business as usual. Currently, all offices are capable of assisting customers with any of their closing needs. There may be some time delays, but our teams are in office and ready to assist you.
Please send new orders to firstname.lastname@example.org. We will let you know if this procedure changes.
HOW DO WE COMMUNICATE WITH YOU?
As we are working to restore email and other digital communication lines, please call your local office for the best way to work through your closing needs. We will be providing updates as they are available.
THANK YOU FOR YOUR PATIENCE AND SUPPORT.
We appreciate your understanding as we work through this issue. We do not have any additional information to share at this time, but we will keep you apprised of relevant developments as the investigation continues.
We take this situation very seriously and are taking all precautions to mitigate any potential harm. If you have any questions concerning this incident, please feel contact your local office with additional questions.