Hackers have obtained customer data from a third-party company used by major Wall Street banks, including JPMorgan Chase and Citi. The disclosure comes just days after a Doordash data breach exposed names, addresses, phone numbers, and more.
SitmusAMC helps banks process mortgage applications and other real estate loans, and says that accounting records and legal agreements have been impacted by the hack …
The company’s statement is quite vague and doesn’t name any specific banking clients.
We became aware of an incident that we have now determined resulted in certain information from our systems being compromised. Corporate data associated with certain of our clients’ relationship with SitusAMC such as accounting records and legal agreements has been impacted. Certain data relating to some of our clients’ customers may also have been impacted. The scope, nature and extent of such impact remains under investigation by the Company and its third-party advisors. Upon becoming aware of the incident, we commenced an investigation with the assistance of leading experts, notified (and continue to cooperate with) federal law enforcement authorities, and began taking measures to assess and contain the incident. The incident is now contained and our services are fully operational. No encrypting malware was involved. We are in direct, regular contact with our clients about this matter. We remain focused on analyzing any potentially affected data and will provide updates directly to our clients as our investigation progresses.
However, an article behind a paywall in The New York Times reports that the company works for hundreds of banks, specifically naming JPMorgan Chase and Citi. CNN reports that the FBI is investigating.
“While we are working closely with affected organizations and our partners to understand the extent of potential impact, we have identified no operational impact to banking services,” FBI Director Kash Patel said in a statement. “We remain committed to identifying those responsible and safeguarding the security of our critical infrastructure.”
A security expert cited by CNN says that the data breach is a stark reminder that security is only as good as the weakest link.
Highlighted accessories
Photo by Christian Wiediger on Unsplash