SitusAMC says a recent breach exposed customer data; the real-estate financing firm provides back-office services for banks and lenders.
SitusAMC, a leading real-estate financing services provider for banks and lenders, disclosed a data breach discovered earlier this month that exposed customer information. The firm manages back-office functions such as mortgage origination, servicing, and compliance for financial institutions.
The company has around 4,500 employees and serves roughly 1,500 clients, including major banks like JPMorgan Chase and Citi. SitusAMC generates about $1 billion in annual revenue and supports real estate loan origination, management, valuation, and compliance, covering global assets worth over $500 billion.
The financing services provider is investigating the incident with the help of external experts. The security breach hasn’t impacted business operations, and the company revealed that it was not a victim of a ransomware attack.
“On November 12, 2025, the Company became aware of an incident that we have now determined resulted in certain information from our systems being compromised.” reads the data breach notice published by the organization. “Upon becoming aware of the incident, the Company commenced an investigation with the assistance of leading experts, notified (and continues to cooperate with) federal law enforcement authorities, and began taking measures to assess and contain the incident. Our services are fully operational, and the incident did not involve encrypting malware.”
SitusAMC said the breach exposed data belonging to some clients and their customers, though it did not identify which companies were affected.
The company announced that they have assessed and contained the breach.
“We are in direct, regular contact with our clients about this matter. We remain focused on analyzing any potentially affected data and will provide updates directly to our clients as our investigation progresses.” continues the notice.
At this time, it is unclear how many customers were impacted or whether the incident affected certain SitusAMC customers.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, data breach)
