SitusAMC Confirms Data Breach: What You Need to Know

SitusAMC, a prominent player in the back-end services for banks and lenders, has reported a data breach that has compromised sensitive client and customer information. This incident, which came to light earlier this month, has raised alarms due to SitusAMC’s critical role in mortgage origination, servicing, and compliance within the real estate financing sector.

Breach Discovery and Initial Findings

SitusAMC confirmed that it first became aware of the breach on November 12, 2025. Subsequent investigations revealed unauthorized access to certain information within its systems. Although the full extent of the breach is still under scrutiny, the company has disclosed that the exposed data includes corporate records tied to clients, such as accounting documents and legal agreements, as well as some information belonging to those clients’ customers.

Importantly, SitusAMC clarified that the incident did not involve the use of encrypting malware, and its operational services remain unaffected. The company is working with external cybersecurity experts and law enforcement to carry out a thorough investigation.

Immediate Response and Security Measures

In response to the breach, SitusAMC took quick action upon detection. The company launched an investigation and began securing its systems, collaborating with third-party cybersecurity specialists and notifying federal authorities to facilitate a cooperative response.

SitusAMC reassured clients that despite some information being compromised, their services continue to function normally. There has been no evidence of ransomware or encryption during the incident, distinguishing it from typical data breach scenarios aimed at extortion.

The firm is actively analyzing the breached data and remains in direct contact with clients who may be affected.

Enhanced Security Protocols

To fortify its defenses against any future threats, SitusAMC has implemented several additional security measures. These include resetting credentials, disabling certain remote access capabilities, updating firewall configurations, and refining internal security settings. The company is still evaluating the specific services and products that might have been impacted, but initial assessments suggest that core business functions are intact.

Risks to Client and Customer Information

The breach has raised concerns about the implications for various stakeholders. According to SitusAMC, certain client business details, including internal corporate documents and records related to client relationships, were accessed. Additionally, some customer information associated with clients may also be at risk. However, the specifics regarding the nature and extent of the exposure are still being evaluated.

SitusAMC emphasized its ongoing commitment to transparency, stating that it is diligently working around the clock with its advisors to ascertain the complete impact of the incident. Updates will be provided as the investigation unfolds.

Customer Communication and Transparency Efforts

To ensure transparency, SitusAMC has made public an example of the notification letter sent to customers on November 22, 2025. This letter details the breach’s occurrence, outlines the types of information potentially compromised, and explains the steps the company is taking to protect its systems going forward.

In this communication, SitusAMC reiterated that the situation has been contained, all services are operational, and no encrypting malware was detected during the breach. Clients have been encouraged to reach out to the company’s security team with any questions or concerns.

As inquiries continue into the specifics of the SitusAMC data breach, the Cyber Express team has attempted to obtain additional information from the firm. At the time of this report, there has been no response, but updates will be made available as soon as they come in.