SitusAMC, a financial service provider handling billions of loan-related documents annually for over 1,500 commercial and residential real-estate financiers, suffered a data breach on 12th November. Hackers infiltrated its systems and stole corporate data tied to banking customers' relationships, including accounting records and legal agreements. Major US banks like JPMorgan Chase, Citigroup, and Morgan Stanley were notified of potential exposure, though the full scope of compromised data remains under investigation. The breach was not a ransomware attack, as no encrypting malware was detected—indicating a focused effort on data exfiltration rather than system disruption. SitusAMC contained the incident, reset credentials, disabled remote access tools, and cooperated with law enforcement (including the FBI). The breach highlights vulnerabilities in third-party vendor dependencies, risking cascading exposure across financial institutions. While no operational impact on banking services was reported, the stolen data could include sensitive non-public information from lenders, investors, and mortgage servicers, posing reputational and financial risks to affected clients.

A misconfigured database at Serviceaide exposed sensitive health and personal information of approximately 500,000 patients linked to Catholic Health, a non-profit healthcare system based in New York. The data leak occurred between September 19 and November 5, 2024, and was discovered on November 15, 2024. The exposed data included full names, dates of birth, prescription data, Social Security numbers, health insurance details, healthcare provider information, treatment and clinical information, medical record and account numbers, email addresses, usernames, and passwords. Although there’s no confirmed evidence that the data was downloaded or misused, the company admitted it cannot rule out that possibility.

On May 9, 2025, Serviceaide, Inc. reported a security incident involving the inadvertent public exposure of certain patient information from its Elasticsearch database related to Catholic Health. The exposure occurred between September 19, 2024, and November 5, 2024, potentially affecting various personal health information, including names and Social Security numbers, although no evidence of actual misuse was identified.