SitusAMC, a financial service provider handling billions of loan-related documents annually for over 1,500 commercial and residential real-estate financiers, suffered a data breach on 12th November. Hackers infiltrated its systems and stole corporate data tied to banking customers' relationships, including accounting records and legal agreements. Major US banks like JPMorgan Chase, Citigroup, and Morgan Stanley were notified of potential exposure, though the full scope of compromised data remains under investigation. The breach was not a ransomware attack, as no encrypting malware was detected—indicating a focused effort on data exfiltration rather than system disruption. SitusAMC contained the incident, reset credentials, disabled remote access tools, and cooperated with law enforcement (including the FBI). The breach highlights vulnerabilities in third-party vendor dependencies, risking cascading exposure across financial institutions. While no operational impact on banking services was reported, the stolen data could include sensitive non-public information from lenders, investors, and mortgage servicers, posing reputational and financial risks to affected clients.

SitusAMC’s $5.3M Data Breach Settlement Faces Judicial Scrutiny in New York A federal judge in the Southern District of New York has requested additional details from plaintiffs suing real estate finance firm SitusAMC over a 2025 data breach, as part of the preliminary approval process for a $5.3 million settlement resolving negligence and related claims. The court seeks clarity on the administration and public notice of the proposed deal, which aims to compensate affected parties following the incident. The breach, which exposed sensitive data, led to legal action against SitusAMC, with plaintiffs alleging failures in safeguarding personal information. The settlement, disclosed in June 2026, marks a significant development in the case, though its final approval remains pending judicial review. The case underscores ongoing scrutiny of corporate data security practices and the financial consequences of breaches in the real estate finance sector.