Cyberattack Hits Major Banks Via Vendor SitusAMC
November 25, 2025, 9:32 am

Location: United States, Florida, Saint Petersburg
Employees: 5001-10000
Founded date: 1985
A cyberattack on SitusAMC, a vendor for major Wall Street banks, has exposed sensitive customer and mortgage data. Banks like JPMorgan Chase, Citi, and Morgan Stanley are affected. The breach raises concerns about third-party security and the vulnerability of the financial sector. The FBI is investigating, but says that banking services are not operationally affected. The incident highlights supply chain risks.
A major cyberattack has struck SitusAMC. SitusAMC is a key tech vendor. Major Wall Street banks are affected. Sensitive customer and mortgage data may be exposed. JPMorgan Chase, Citi, and Morgan Stanley are involved.
SitusAMC confirmed a breach. The breach occurred on November 12th. Hackers accessed systems. Corporate data was exposed. Client customer data was also exposed. The "scope, nature and extent" are under investigation. SitusAMC secured systems quickly. They are working with security experts and law enforcement.
SitusAMC stated systems are operational. Services are fully functional. The attack did not involve encrypting malware. The company is investigating thoroughly. They will provide updates as they learn more.
Sources identified impacted clients. JPMorgan Chase is among those affected. SitusAMC has relationships with many leading firms. These include banks, private equity firms, and asset managers. Insurance companies are also clients. The vendor manages a large portion of the US mortgage market. The market is worth $13.5 trillion. This equates to approximately 44% of the US GDP.
Concerns are growing about data. The data includes customer data. It also includes sensitive details about inner workings. The details cover the world’s largest investment banks. The banks maintain they were not directly hit.
The scale of the breach is concerning. FBI Director Kash Patel issued a statement. He stated there is "no operational impact to banking services." The FBI is working with affected organizations. They are trying to understand the potential impact.
The SitusAMC hack is likely to heighten concerns. It highlights security of third-party services and tech vendors. Supply chains are vulnerable. Many industries have experienced cyberattacks.
Marks & Spencer suffered a loss. They lost £136 million. This followed a breach of a third-party contractor. Salesforce recently had a breach. The breach related to the Gainsight platform. Google estimated over 200 companies were affected.
Statistics show a trend. Over 70% of organizations reported incidents. These incidents involved third parties. Firms are rethinking security strategies. JPMorgan's CISO, Patrick Opet, emphasized vendor security. Vendors should boost security practices. This will avoid disruptions across financial services.
Banks are determining the extent of data compromise. They are unsure if mortgage data was accessed. Institutions are hesitant to share details. Uncertainty surrounds the incident.
SitusAMC emphasized operational platforms. "The incident is now contained," they stated. They confirmed, "No encrypting malware was involved."
SitusAMC launched an investigation immediately. They brought in cybersecurity experts. They also notified federal law enforcement.
FBI Director Kash Patel shared a statement. He stated they are working with organizations to assess impact. There is "no operational impact to banking services." They are committed to identifying those responsible. They want to safeguard critical infrastructure.
Cybersecurity experts offer analysis. This incident highlights risks. These risks are associated with third-party vendors. Banks invest heavily in cyber defense. They still rely on smaller partners. These partners might lack protection.
SitusAMC is in "direct, regular contact" with clients. They will share updates as the investigation progresses.
This breach underscores critical vulnerabilities. Third-party vendors present a significant risk. Banks must enhance vendor oversight. Stronger security measures are essential. The financial sector must protect sensitive data. Vigilance is needed in an evolving threat landscape.
"
Cyberattack on Mortgage Vendor SitusAMC Exposes Bank Data
Vendor Breach Impacts Financial Giants
A major cyberattack has struck SitusAMC. SitusAMC is a key tech vendor. Major Wall Street banks are affected. Sensitive customer and mortgage data may be exposed. JPMorgan Chase, Citi, and Morgan Stanley are involved.
SitusAMC Confirms the Breach
SitusAMC confirmed a breach. The breach occurred on November 12th. Hackers accessed systems. Corporate data was exposed. Client customer data was also exposed. The "scope, nature and extent" are under investigation. SitusAMC secured systems quickly. They are working with security experts and law enforcement.
SitusAMC stated systems are operational. Services are fully functional. The attack did not involve encrypting malware. The company is investigating thoroughly. They will provide updates as they learn more.
Banking Giants Scramble
Sources identified impacted clients. JPMorgan Chase is among those affected. SitusAMC has relationships with many leading firms. These include banks, private equity firms, and asset managers. Insurance companies are also clients. The vendor manages a large portion of the US mortgage market. The market is worth $13.5 trillion. This equates to approximately 44% of the US GDP.
Data Trove at Risk
Concerns are growing about data. The data includes customer data. It also includes sensitive details about inner workings. The details cover the world’s largest investment banks. The banks maintain they were not directly hit.
FBI Steps In
The scale of the breach is concerning. FBI Director Kash Patel issued a statement. He stated there is "no operational impact to banking services." The FBI is working with affected organizations. They are trying to understand the potential impact.
Third-Party Security Concerns
The SitusAMC hack is likely to heighten concerns. It highlights security of third-party services and tech vendors. Supply chains are vulnerable. Many industries have experienced cyberattacks.
Marks & Spencer suffered a loss. They lost £136 million. This followed a breach of a third-party contractor. Salesforce recently had a breach. The breach related to the Gainsight platform. Google estimated over 200 companies were affected.
Statistics show a trend. Over 70% of organizations reported incidents. These incidents involved third parties. Firms are rethinking security strategies. JPMorgan's CISO, Patrick Opet, emphasized vendor security. Vendors should boost security practices. This will avoid disruptions across financial services.
Banks React and Investigate
Banks are determining the extent of data compromise. They are unsure if mortgage data was accessed. Institutions are hesitant to share details. Uncertainty surrounds the incident.
SitusAMC emphasized operational platforms. "The incident is now contained," they stated. They confirmed, "No encrypting malware was involved."
Federal Authorities Respond
SitusAMC launched an investigation immediately. They brought in cybersecurity experts. They also notified federal law enforcement.
FBI Director Kash Patel shared a statement. He stated they are working with organizations to assess impact. There is "no operational impact to banking services." They are committed to identifying those responsible. They want to safeguard critical infrastructure.
Expert Analysis
Cybersecurity experts offer analysis. This incident highlights risks. These risks are associated with third-party vendors. Banks invest heavily in cyber defense. They still rely on smaller partners. These partners might lack protection.
SitusAMC is in "direct, regular contact" with clients. They will share updates as the investigation progresses.
This breach underscores critical vulnerabilities. Third-party vendors present a significant risk. Banks must enhance vendor oversight. Stronger security measures are essential. The financial sector must protect sensitive data. Vigilance is needed in an evolving threat landscape.
"


