Key Takeaways
- SitusAMC, a major mortgage processing vendor, suffered a significant cyberattack on November 12.
- Client data from major banks including JPMorgan, Citibank, and Morgan Stanley may have been compromised.
- Sensitive information including Social Security numbers from loan applications is at risk.
- The FBI is monitoring but confirms no operational impact to banking services.
Major US banks are urgently assessing potential data exposure following a serious cyberattack on SitusAMC, a critical vendor that processes real estate loans for hundreds of financial institutions. The breach, which occurred on November 12, could have exposed sensitive customer information from banking giants including JPMorgan Chase, Citibank, and Morgan Stanley.
Major Banks Potentially Affected
According to sources briefed on the incident, SitusAMC has notified JPMorgan Chase, Citibank, and Morgan Stanley that their client data may have been stolen. A JPMorgan spokesperson clarified that the bank’s own systems were not directly hacked, emphasizing the attack targeted their vendor.
Sensitive Customer Data at Risk
The breach has raised significant concerns on Wall Street due to the highly sensitive nature of information SitusAMC handles. The company maintains extensive collections of personal data from mortgage applications, including Social Security numbers and detailed financial information that could be valuable to cybercriminals.
SitusAMC CEO Michael Franco confirmed the company has notified law enforcement and stated they “remain focused on analyzing any potentially affected data.” The vendor has been providing near-daily updates to its banking clients as the investigation continues.
FBI Monitoring the Situation
FBI Director Kash Patel addressed the incident, stating: “While we are working closely with affected organizations and our partners to understand the extent of potential impact, we have identified no operational impact to banking services.”
SitusAMC serves as essential infrastructure for the real estate lending industry, offering critical services including loan origination, collection, and regulatory compliance. The company, which employs approximately 5,000 people, is owned by several private equity firms.
