finsmart-news_admin 
A cyberattack on a New York-based tech vendor has led to the exposure of sensitive customer data, including records belonging to three of the largest banks in the US.
In a notice, SitusAMC says it became aware of a cybersecurity incident on November 12th, 2025, when an unauthorized third party gained access to its systems and stole files that may include customer accounting records, legal documents and other corporate data.
“We have bifurcated documents into two sections, the (i) corporate files consisting of accounting (ex. Invoices) and legal records and (ii) client files consisting of files related to our client’s business activities. These client files are generally associated with our residential Collateral and Asset Management offering, which focused largely on assignments and recording of mortgages. However, a smaller number of other records may also be included in these areas related to various businesses at SitusAMC and some records associated with loan file due diligence in our residential business.”
The New York Times, citing people familiar with the matter, reports that JPMorgan Chase, Citi and Morgan Stanley were among the clients notified by SitusAMC that their customer data may have been stolen.
SitusAMC provides technology, strategic outsourcing, talent and advisory solutions to major banks, lenders, investors and government agencies.
The IT vendor says it is taking measures to harden its system’s defenses while cooperating with law enforcement authorities. SitusAMC says it is still in the midst of reviewing impacted files and will continue to provide updates to customers involved.
