SEC Announces Settled Charges Against First American for Cybersecurity Disclosure Controls ...

... The Order alleges that First American's CISO and CIO failed to inform the company's senior executives of their prior knowledge of the vulnerability.
read source