US banks rush to evaluate stolen data after financial tech firm hacked in breach

📅 Published: 11/24/2025
🔄 Updated: 11/24/2025, 4:10:57 PM
📊 11 updates
⏱️ 8 min read
📱 This article updates automatically every 10 minutes with breaking developments

Several major U.S. banks are urgently evaluating the extent of stolen customer data following a cyberattack on a prominent financial technology firm, SitusAMC, earlier this month. The breach, confirmed by SitusAMC on November 12, involved unauthorized access to sensitive corporate data, including banking customer information, accounting records, and legal agreements, impacting over a thousand commercial and real estate financiers who rely on the company’s technology[2][7].

SitusAMC, a New York-based fintech provider handling billion...

SitusAMC, a New York-based fintech provider handling billions of loan-related documents annually, stated that while the incident is now contained and their systems are operational, the full scope and nature of the cyberattack remain under investigation. The company reported no deployment of encrypting malware, indicating the hackers’ primary objective was data exfiltration rather than system destruction[2].

Among the affected institutions notified by SitusAMC are som...

Among the affected institutions notified by SitusAMC are some of the largest U.S. banking giants, including JPMorgan Chase, Citigroup, and Morgan Stanley. These banks are reportedly scrambling to assess how much of their customers’ data may have been compromised. The FBI has launched an investigation into the breach, although details remain limited[2].

This incident follows other recent data security challenges...

This incident follows other recent data security challenges for U.S. banks. For example, U.S. Bank disclosed an April 2025 breach caused by a technical configuration error that exposed personal details such as account numbers, names, and contact info for approximately 11,000 customers. That breach involved accidental data sharing by a third-party vendor and raised concerns of possible identity theft and phishing risks[1][3].

Cybersecurity experts warn that such breaches highlight vuln...

Cybersecurity experts warn that such breaches highlight vulnerabilities in financial technology ecosystems, particularly where third-party vendors handle critical data. The SitusAMC attack is believed to be a targeted operation, possibly employing advanced persistent threat (APT) tactics like credential theft and social engineering to bypass security measures. The attempted theft has been described as potentially amounting to $130 million, underscoring the high stakes involved[4].

The ripple effects of the breach could impact not only Ameri...

The ripple effects of the breach could impact not only American financial institutions but also partner banks and payment processors internationally, potentially destabilizing financial transactions and increasing regulatory scrutiny. This underscores the necessity for robust cybersecurity defenses and comprehensive incident response strategies in the fintech sector to safeguard sensitive financial data and maintain market confidence[4].

As investigations continue, affected banks are notifying cus...

As investigations continue, affected banks are notifying customers and enhancing their monitoring systems to detect any fraudulent activity. Customers are advised to remain vigilant for phishing attempts and unauthorized transactions following the breach disclosures.

🔄 Updated: 11/24/2025, 2:30:21 PM
Several major U.S. banks, including JPMorgan Chase, Citigroup, and Morgan Stanley, are urgently assessing the impact of a data breach after hackers targeted SitusAMC, a New York-based financial technology firm serving over a thousand commercial and real estate financiers. The breach, discovered November 12, involved theft of corporate data, accounting records, and legal agreements tied to the banks’ customers, with the FBI currently investigating the incident[2]. SitusAMC confirmed the breach is contained, but the full scope and extent of stolen customer information remain under investigation[2].
🔄 Updated: 11/24/2025, 2:40:19 PM
U.S. banks are urgently assessing the fallout from a major cyberattack on SitusAMC, a New York-based financial tech firm that supports over 1,000 lenders, after hackers stole corporate data, accounting records, and legal agreements on November 12. JPMorgan Chase, Citigroup, and Morgan Stanley are among the institutions scrambling to determine the extent of customer data exposure, with SitusAMC confirming the breach but not specifying the number of affected clients. "This incident could shift competitive dynamics as banks reevaluate reliance on third-party tech providers for sensitive operations," said a Bloomberg source close to the investigation.
🔄 Updated: 11/24/2025, 2:50:19 PM
Several major U.S. banks, including JPMorgan Chase, Citigroup, and Morgan Stanley, are urgently assessing the impact after a cyberattack on financial tech firm SitusAMC was discovered on November 12, 2025. The breach involved theft of corporate data, accounting records, and legal agreements related to over a thousand commercial and real estate financiers, with investigations ongoing and FBI involvement confirmed[2][3]. SitusAMC reported the incident is contained and its systems operational, but details on the number of affected customers remain unspecified as banks continue their urgent evaluations[2].
🔄 Updated: 11/24/2025, 3:00:21 PM
U.S. banks, including JPMorgan Chase, Citigroup, and Morgan Stanley, are urgently assessing the fallout from a major cyberattack on New York-based financial technology firm SitusAMC, which confirmed on November 12, 2025, that hackers stole corporate data, accounting records, and legal agreements tied to its global banking clients. The breach has triggered international concern, with European regulators and financial institutions reviewing potential exposure, as SitusAMC processes billions of loan documents annually for over a thousand financiers worldwide. FBI officials have joined the investigation, and federal authorities are coordinating with global partners to evaluate the full scope of the data theft.
🔄 Updated: 11/24/2025, 3:10:18 PM
U.S. banks, including JPMorgan Chase, Citigroup, and Morgan Stanley, are urgently assessing the global fallout after hackers breached SitusAMC, a New York-based financial technology firm, on November 12, 2025. The attack compromised corporate data, accounting records, and legal agreements tied to over a thousand commercial and real estate financiers worldwide, with affected institutions spanning pension funds and state governments. International regulators and the FBI are now collaborating to evaluate the breach’s scope, as SitusAMC confirmed no encrypting malware was used but warned that stolen data could impact clients across multiple continents.
🔄 Updated: 11/24/2025, 3:20:19 PM
Consumers are expressing alarm after news broke that a cyberattack on financial tech firm SitusAMC may have exposed sensitive mortgage data belonging to clients of JPMorgan Chase, Citigroup, and Morgan Stanley, with some affected customers reporting increased phishing attempts and anxiety over identity theft. Public reaction has been swift, with social media flooded by worried borrowers demanding transparency; one Twitter user wrote, “How do I know my Social Security number isn’t already for sale?” while others criticize banks for relying on third-party vendors with weak security. Banks have begun sending out fraud-monitoring alerts and offering free credit monitoring, but many customers remain skeptical, saying, “Two years of monitoring won’t fix years of potential fraud.”
🔄 Updated: 11/24/2025, 3:30:29 PM
Following the recent cyberattack on CITUS AMC, a financial tech firm linked to major US banks, the stock prices of affected banks such as JPMorgan Chase, Citigroup, and Morgan Stanley showed cautious volatility amid market uncertainty. Although no specific operational disruptions were reported, investors reacted to the breach news with modest declines, reflecting concerns over potential reputational damage and future financial liabilities, consistent with historical patterns where bank stocks can drop between 3-5% after data breach announcements[5][2]. Federal investigations remain ongoing as banks hurriedly assess the scope of stolen data to mitigate further market fallout.
🔄 Updated: 11/24/2025, 3:40:40 PM
U.S. banks are urgently evaluating the impact of a recent cyberattack on SitusAMC, a financial tech firm serving over a thousand commercial and real estate financiers, after hackers stole corporate data, accounting records, and legal agreements on November 12, 2025. The breach appears focused on data exfiltration without malware encryption, indicating a targeted data theft rather than destructive intent, with major banks like JPMorgan Chase, Citigroup, and Morgan Stanley notifying affected customers as investigations continue and the FBI probes the incident[2]. The technical nature of the attack suggests a sophisticated intrusion exploiting vulnerabilities in financial technology systems, raising concerns over supply chain security across the banking sector.
🔄 Updated: 11/24/2025, 3:50:34 PM
Consumer and public reaction to the recent U.S. financial tech firm SitusAMC data breach has been marked by concern and uncertainty, as banks scramble to assess the extent of stolen customer data. While the exact number of affected customers remains unclear, the breach, confirmed November 12, has prompted major banks like JPMorgan Chase and Citigroup to evaluate potential exposure, leading to anxiety about personal information misuse and identity theft risks. Experts note the public's frustration is fueled by repeated incidents in the banking sector, with prior breaches involving thousands of customers and costly consequences, raising skepticism about the sufficiency of current cybersecurity measures and the adequacy of offered identity protection services[2][5][6].
🔄 Updated: 11/24/2025, 4:01:12 PM
U.S. banks are urgently assessing the fallout from a major cyberattack on SitusAMC, a New York-based financial tech firm that serves over 1,000 commercial and real estate financiers, after hackers stole corporate data, accounting records, and legal agreements on November 12, 2025. The breach has triggered a scramble among banking giants like JPMorgan Chase, Citigroup, and Morgan Stanley to determine the extent of customer data exposure, with sources confirming that SitusAMC sent breach notifications to these institutions, potentially reshaping competitive trust and client relationships in the sector. “This incident underscores how reliant even the largest banks are on third-party tech providers, and could accelerate a shift toward more in-house
🔄 Updated: 11/24/2025, 4:10:57 PM
U.S. banks are urgently evaluating the extent of data stolen after a cyberattack on SitusAMC, a New York-based financial tech firm serving over a thousand commercial and real-estate lenders, on November 12, 2025[2][3][7]. The breach involved exfiltration of corporate data including accounting records and legal agreements, but no ransomware or encryption malware was deployed, indicating hackers aimed to steal data rather than disrupt operations[2][3]. The FBI is actively investigating, while major banks such as JPMorgan Chase, Citigroup, and Morgan Stanley have been notified, though precise impact details and the volume of compromised customer data remain under assessment[2][3][7].
← Back to all articles

Latest News