SitusAMC: Data breach affects customers

SitusAMC , one of the largest back-end services providers to banks and financial institutions in the United States, disclosed on Saturday a serious data breach that was discovered earlier in November. The company confirmed that an unspecified amount of information related to its customers and partners was exposed, but did not say which specific businesses were affected .

A giant company in the real-estate financing sector

SitusAMC is one of the largest providers of specialized support functions in the U.S. Its services cover critical areas such as:

• Issuance and evaluation of mortgage loans
• Service and collection services
• Compliance with regulatory frameworks
• Support for investment schemes

See also: Canon breached by Clop ransomware group

With nearly $1 billion in annual revenue and over 1,500 clients, the company works with some of the biggest names in the financial industry — including Citi, Morgan Stanley, and JPMorgan Chase. Its involvement in critical parts of the banking operation makes the security of its data fundamental.

The disclosure of the breach and the timeline of developments

According to the official announcement, the company received a notification on November 12 indicating a potential security issue. By November 15, after an initial check, it was confirmed that it was an actual systems breach.

On November 16, SitusAMC began notifying selected partners that an investigation into a cyberattack had been launched. The notification process continued gradually and —as it became known— by November 22 , all business customers had been notified, while it was also confirmed that the attackers had indeed intercepted data.

What kind of information was exposed?

In its official statement, the company explained that the following were affected:

• corporate data (such as accounting records, contracts and institutional documents)
• Information related to customers of its customers

SitusAMC did not disclose the exact number of affected organizations and individuals, emphasizing that the complexity of the data requires time for a full assessment.

See also: Harvard University data breach affects alumni and donors

What does the company's management say?

The company's CEO, Michael Franco, said in an official statement to BleepingComputer that SitusAMC remains fully operational:

«We are in direct contact with our customers regarding the incident. We remain focused on analyzing any data that may have been impacted and will provide updates directly to our customers as our investigation progresses.».

The company also noted that there is no evidence of ransomware being installed on its systems. Business operations are continuing as normal.

The challenges posed by such a breach

The SitusAMC case highlights a critical problem in the financial sector: the cascading vulnerability that occurs when an intermediary service provider is compromised. Banks and lenders rely on external partners for complex operations; thus, a cyberattack on a third party can pave the way for data loss at multiple levels.

Furthermore, the fact that attackers gained access to accounting records and legal documents means they could gain deep knowledge of the inner workings of large organizations — which increases the risk of targeted attacks in the future.

See also: Hackers replace the letter 'm' with the combination 'rn' in Microsoft

What to expect next?

The investigation is still ongoing, with SitusAMC promising regular updates to customers and partners. The time required to fully assess the impact may be long, as experts try to identify exactly what data was leaked and how it could be exploited by cybercriminals.

The incident serves as yet another reminder that supply chain security in the digital world is just as important as the security of banking systems — and often even more difficult to test and protect.

Source: www.bleepingcomputer.com