Initial Guidance On Responding To The SitusAMC Data Breach

Over the last weekend, major media reported that a key financial services provider, SitusAMC, suffered a substantial data security incident. This Alert summarizes what we know so far, the possible legal implications, and some action items for the corporate clients of SitusAMC.

Breach Announcement

On November 22, 2025, SitusAMC posted a statement indicating that a November 12 data security incident had impacted (i) corporate data tied to some of its clients' relationships and (ii) "certain data relating to some of our clients' customers may also have been impacted." Although it assured clients that services remain operational, the scope, nature, and extent of the incident remain under investigation. SitusAMC processes commercial real estate applications that would normally include detailed financial information about tenants including Social Security numbers.