Gary Gensler, Chair of the U.S. Securities and Exchange Commission, testifies before a Senate Banking, Housing, and Urban Affairs Committee oversight hearing on the SEC on Sept. 14, 2021 in Washington, DC. (Photo by Evelyn Hockstein-Pool/Getty Images)
The headquarters of the US Securities and Exchange Commission (SEC) is seen in Washington, DC, January 28, 2021. (Photo by SAUL LOEB/AFP via Getty Images)
The commission said First American's information security personnel spotted the vulnerability months earlier, but didn't fix it or notify company brass.