https://www.nytimes.com/2025/11/22/business/bank-data-hack.html

In a significant cybersecurity breach, a technology vendor that serves hundreds of banks and lenders, SitusAMC, has been the subject of a large-scale hack. The incident has raised concerns among some of the nation’s biggest financial institutions, including JPMorgan Chase, Citi, and Morgan Stanley, as the compromised data could expose sensitive customer information.

SitusAMC, a company that provides services for originating and collecting money from real estate loans and mortgages, confirmed the cyberattack on 12th November. The company has been working to determine the extent of the data breach, which is said to have exposed information related to residential loan mortgages. The affected banks have been notified by SitusAMC about the potential exposure of their client data.

While the full impact of the breach is still being assessed, the incident has highlighted the significant amount of sensitive personal information that SitusAMC holds, including Social Security numbers and other details from loan applications. The Federal Bureau of Investigation (FBI) has been involved in the investigation, and while no operational impact to banking services has been identified, the incident has raised concerns about the security of the “necessary plumbing” that supports the commercial and residential real estate market.