Accessibility links

Facebook   X   LinkedIn   Email

Third Party Data Breach Exposes Sensitive Information of Banking Customers

By: Jim Stickley and Tina Davis
January 25, 2026

Wall Street is scrambling after hackers infiltrated SitusAMC, a New York-based real estate data firm serving over 1,500 financial institutions. The cyberattack has potentially exposed sensitive customer data from major banks including JPMorgan Chase, Citigroup, and Morgan Stanley.

SitusAMC discovered unauthorized access to its systems on November 12, 2025, and immediately notified affected clients. The company confirmed that account records, legal agreements, and customer data related to real-estate loans and mortgages were compromised. Fortunately, no ransomware or encrypting malware was deployed, and services remained fully operational.

Who Is Affected?

Customers of major financial institutions that use SitusAMC for mortgage payment processing may be at risk. The breach could expose personally identifiable information, financial account details, and legal documents. The FBI is investigating, but has confirmed that there is no operational impact to banking services at this time.

What Victims Should Do:

If you’re a customer of JPMorgan, Citi, Morgan Stanley, or other major banks, take immediate action:

  • Monitor your bank accounts and credit reports for suspicious activity
  • Enable fraud alerts with credit bureaus
  • Change online banking passwords immediately
  • Watch for phishing emails claiming to be from your bank
  • Consider placing a credit freeze with major credit bureaus
  • Prevention Tips

Protect yourself from future breaches by using strong, unique passwords for each financial account, enabling two-factor authentication, and regularly reviewing account statements. Be skeptical of unsolicited communications requesting personal information, even if they appear legitimate.

Financial institutions are conducting forensic reviews to determine the full extent of the breach.



Blue Shield of CA Releases Data Breach Info

Identity Theft

Blue Shield of CA Releases Data Breach Info

Finding out your healthcare information was compromised in a data breach is not unlike getting sucker punched. Recently, Blue Shield of California (BSca) experienced a breach and as a result, any number of their 5 million members did as well. The healthcare company recently released a data breach notice answering many of the questions their members want and need explained. BSca learned the incident happened between April 2021 and January 2024. READ FULL STORY
Why Business Social Media Accounts Need Strong Passwords, Too

Corporate Security

Why Business Social Media Accounts Need Strong Passwords, Too

Business leaders and those responsible for their corporate social media accounts can use this reminder about the importance of secure passwords – you’re only one weak password away from a breach. It’s a truth that’s too easily forgotten, especially when it has to do with securing a company’s social media websites. Whether a company’s oversight is internal or done by a third-party provider, breached social media sites start with a compromised password and can end with damage to a company’s brand and worse. READ FULL STORY
Investor Headaches After Fidelity Data Breach

Identity Theft

Investor Headaches After Fidelity Data Breach

Fidelity Investments, one of the world’s largest financial services corporations, announced they were hit by a data breach. The investment titan informed more than 77,000 of their affected customers that some of their most sensitive personally identifiable information (PPI) was accessed in the hack. The company sent breach notices to state attorneys general, where their victimized customers live. But that doesn't mean others weren't affected and anyone with an account should use extra caution. READ FULL STORY
Avis Breach Drives Customer Information to Attackers

Identity Theft

Avis Breach Drives Customer Information to Attackers

Recently, Avis Car Rental experienced a significant data breach that exposed the personal information of nearly 300,000 customers. According to Avis, the breach was detected after an unauthorized third party accessed one of the company’s business applications between August 3 and August 6, 2024. The attackers managed to steal sensitive data, which means those using the company's services should take them up on their offers for credit monitoring. READ FULL STORY
The Most Massive Data Breaches In The U.S.—So Far

Identity Theft

The Most Massive Data Breaches In The U.S.—So Far

These days, news of massive data breaches is no longer as shocking as it used to be. It’s been non-stop news for so long that Americans are becoming numb to these crimes. But when billions of records so far this year have been hijacked by cybercriminals, these mega breaches are serious business—especially for the victims. Below is a closer look at some of the biggest data breaches (so far) this year and some brief notes on what you can do to help protect yourself from cybercrimes. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.