A number of U.S. banks have begun hurriedly evaluating the extent of customer data compromised in a cyberattack on SitusAMC.

Following this news, hackers accessed a large amount of information from a company utilized by prominent Wall Street banks for real-estate loans and mortgages. This prompted an urgent assessment to ascertain what was taken and which financial institutions were affected, according to details provided by CNN Business.

SitusAMC, based in New York, acknowledged that records of accounts and legal agreements relating to some of its clients and customers were impacted during the breach. The firm also stated that while the incident was contained and its services remained operational, no encryption malware was involved. SitusAMC discovered unauthorized access on November 12, 2025, and promptly warned customers about potential impacts.

SitusAMC Cyberattack Highlights Mortgage Data Vulnerabilities and FBI’s Response

Major banks and financial institutions invest heavily in cybersecurity measures, making the sector a well-defended environment dedicated to protecting its customers. Nonetheless, cyberattacks on these sectors continue unabated, and interdependencies among various firms can create vulnerabilities.

CNN Business reported that SitusAMC notified several clients, including JPMorgan Chase and Citi, of potential data exposure but did not specify which client information was accessed. The investigation is ongoing, with spokespersons from JPMorgan Chase and Citi declining to comment on the breach. Additionally, no clear suspect has emerged as the FBI continues its probe.

As SitusAMC works closely with affected organizations and partners to understand potential impacts, the FBI aims to identify those responsible while safeguarding critical infrastructure security.

Unlike direct attacks on major banks, the cyberattack targeted essential service firms that link mortgage and commercial property markets, highlighting concentrated risks in a few less visible entities.