SitusAMC hack exposes JPMorgan, Morgan Stanley, and Citi to potential data risks

A cyberattack on SitusAMC, a real estate finance and technology provider used by major Wall Street institutions, placed customer data from JPMorgan, Morgan Stanley, Citi, and other banks at risk after intruders accessed systems that handle mortgage and loan information.

According to a report, SitusAMC identified the breach on November 12 and determined that malicious actors gained access to sensitive corporate records and certain client customer data. The compromised vendor processes mortgage payments and manages real estate loan information for hundreds of U.S. financial institutions, including many of the country’s largest banks, significantly amplifying the impact of the intrusion.

The company confirmed that accounting records, legal agreements, and data tied to client relationships were affected. Early findings also showed that some customer information from its banking clients may have been exposed. Investigators were still determining the nature and volume of the data involved.

Because SitusAMC’s systems support lender payment operations, the compromised information may include personally identifiable details and financial account data. Such information could enable identity theft or targeted social engineering attacks, although the precise categories of affected records remained under review.

SitusAMC stated that no encrypting malware was detected, indicating the incident did not involve ransomware. The company said it continued regular communication with its clients to provide updates as its investigation progressed.

Federal authorities were aware of the breach, and the FBI reported no operational impact to banking services.

SitusAMC, which generates more than $1.1 billion in annual revenue and employs over 4,000 people across 25 global locations, is a major player in the real estate solutions market. The incident underscores the growing risks tied to third-party vendor breaches, where a single compromise can expose data across multiple financial institutions.