Major U.S. Banks Potentially Affected in SitusAMC Cyberattack

A recent cyberattack on technology vendor SitusAMC may have exposed sensitive data connected to major U.S. banks, including JPMorgan Chase, Citi, and Morgan Stanley, according to a report from the New York Times. The incident, which took place on November 12, involved unauthorized access to certain company systems and may have compromised information belonging to the clients of its financial-industry partners.

SitusAMC confirmed the breach in a public statement, acknowledging that the attack impacted some internal data as well as information related to customers of select clients. The New York–based firm, known for providing technology and services to real estate lenders and large financial institutions, did not specify which partners were affected. The company noted that the compromised data may include corporate documents, accounting records, and legal contracts tied to ongoing business activities.

While JPMorgan Chase, Citi, and Morgan Stanley have not yet responded to inquiries regarding the potential exposure, the investigation is ongoing. SitusAMC CEO Michael Franco stated that the company is continuing to analyze the scope of the impacted information and has notified law enforcement authorities. He emphasized that the situation has been contained and that the firm’s systems are fully operational. Importantly, the company clarified that the breach did not involve encrypting malware, often associated with ransomware attacks.

FBI Director Kash Patel told the New York Times that federal investigators are working closely with affected organizations to assess the extent of the incident. He added that there is currently no operational impact on banking services, helping reassure customers concerned about disruptions or financial risks.

Although the FBI has not yet issued an official public statement, Reuters reported that it could not immediately reach the agency for further comment. As cybersecurity threats continue to rise across the financial sector, this incident highlights the increasing risks facing banks and their third-party vendors, reinforcing the need for stronger security measures and rapid response protocols.