Aspen Title & Escrow Data Breach

According to the company's official notice, a forensic investigation determined that some information on its network was subject to intermittent unauthorized access on August 11 and again on August 28. The company contacted law enforcement and outside computer-forensics specialists after discovering the event. The initial access method, duration of each access, and responsible person or group were not publicly disclosed.

Information varied by person and may include names, Social security numbers, driver's license or state identification numbers, dates of birth, and financial account information. The company's official list also includes taxpayer identification numbers, passport numbers, digital signatures, medical information, and health insurance information. These fields should not be assumed to have applied to every person.

The company said it notified law enforcement, worked with outside computer-forensics specialists, changed network passwords, and reviewed its policies and procedures. It offered potentially affected people 24 months of credit monitoring and identity-protection services.

Notice recipients should review credit reports, bank accounts, and health-insurance explanation-of-benefits statements for unfamiliar activity or claims. A free credit freeze or fraud alert may be appropriate when a Social Security number is involved, while people whose driver's license or passport information was affected can follow guidance from the issuing agency. Unexpected links using the Aspen Title or protection-service name should be verified against the official notice.