SitusAMC Data Breach Class Action Investigation

Chimicles Schwartz Kriner & Donaldson-Smith is investigating a potential class action claim against SitusAMC (Situs Group Holdings, L.P.), a leading provider of technology and services to the real estate finance industry, for a data security incident that may have impacted the personal information of countless mortgage and loan applicants.

According to public reports and breach notifications sent to corporate clients on November 22, 2025, a cybersecurity incident compromised the systems of SitusAMC. Because SitusAMC processes loans and provides valuation services for a vast network of institutional clients—including JPMorgan Chase, Citi (Citigroup), and Morgan Stanley, as well as state governments, pension funds, and insurance carriers—consumer data entrusted to any of these organizations may have been exposed in this significant third-party vendor breach.

What Happened at SitusAMC? On November 12, 2025, SitusAMC discovered unauthorized activity within its network. Following an internal review, the company confirmed it had been the target of an external cyberattack. The company is currently investigating the scope of the breach with the assistance of third-party forensic experts and the FBI.

What Information Was Compromised? SitusAMC holds vast amounts of data regarding loan applications and mortgages. While the breach impacted corporate legal agreements, it also exposed sensitive downstream consumer data. The compromised information may include, but is not limited to, the following:

• Unredacted Social Security numbers

• Financial histories and income data

• Loan application details

• Property addresses

• Full Names and Contact Information

Why Is This Important? The exposure of this sensitive information places affected individuals at a significantly increased risk of identity theft, financial fraud, and other related harms. As this breach involves permanent data points like Social Security numbers and financial history, the compromised data can be exploited by criminals for years to come.

What Should You Do? If you received a notification regarding the SitusAMC data breach—or a notification from your bank or mortgage servicer linking a breach to their vendor—and believe your personal information was compromised, please contact one of our data breach attorneys by filling out the form below to learn more about your legal rights.