In a recent cybersecurity incident, client data from major financial institutions, including JPMorgan Chase, Citigroup, and Morgan Stanley, may have been compromised due to a hack involving a technology vendor, SitusAMC. The New York Times reported on the matter, citing sources familiar with the ongoing investigation.
SitusAMC, based in New York and focused on serving real estate lenders, disclosed that it experienced a cyberattack on November 12. The breach has led to the compromise of certain information from its systems, as stated in their announcement on their website. The company acknowledged that “data relating to some of our clients’ customers may also have been impacted,” though it did not specify which clients were affected.
The targeted data reportedly includes sensitive corporate information related to clients’ dealings with SitusAMC, encompassing items like accounting documents and legal contracts. In a statement to the New York Times, Michael Franco, the company’s chief executive, emphasized their commitment to thoroughly analyze potentially affected data and noted that law enforcement had been notified of the incident.
FBI Director Kash Patel provided an update from the agency’s perspective, indicating that while they are working closely with the organizations involved to determine the extent of the breach, there have been no identified impacts on the operational aspects of banking services.
SitusAMC assured clients that the situation had been contained and all services were fully operational. The company also clarified that no encrypting malware was involved in the cyberattack.
As the investigation continues, both the affected banks and SitusAMC have faced scrutiny regarding the safeguarding of client data in an increasingly hostile cyber landscape.

