HackingIdentity (basic)Government IDMediumContained

SITUSAMC HOLDINGS CORPORATION

bd_0e026f4c9cfcfedb · schema v1 · pii pii-v2

Severity

Medium

Discovered

Nov 12, 2025

Filed

Jan 28, 2026

To disclose

—

Affected

Not disclosed

Linked

17 filings

Confidence

65%

Full breach record for SITUSAMC HOLDINGS CORPORATION →

SitusAMC Holdings Corporation notified Nebraska residents of a data breach occurring between November 12-19, 2025. Unauthorized access resulted in the potential exposure of names, addresses, dates of birth, and Social Security numbers. The company engaged third-party experts, notified law enforcement, and is offering 24 months of identity theft protection services through IDX. Notices were sent on January 28, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 12, 2025

Begins

Nov 12, 2025

Discovered

Jan 28, 2026

Filed

This filing is one of 17 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_6a4691fada8d391e2026-02-20 · +23dVerified
Montana State AGbd_28507ebc876b8c8d2026-03-10 · +41dVerified
Indiana State AGbd_70a785f4cf612d8c2026-03-10 · +41dVerified
Indiana State AGbd_8485960cdfce7d6c2026-03-10 · +41dVerified

Show 6 more filings ↓up to 68d gap

California State AGbd_c52f9d050e7058e12026-03-10 · +41dVerified
Oregon State AGbd_0cbe44e43d4d6e6f2026-03-23 · +54dVerified
California State AGbd_9fd5d288eb9921f42026-04-03 · +65dVerified
Maine State AGbd_e18d1724ef30fa6f2026-04-03 · +65dVerified
Texas State AGbd_4b06c2519a61551f2026-04-06 · +68dVerified
New Hampshire State AGbd_75b585487f6fa3562026-04-06 · +68dVerified

Showing first 10 of 16 linked disclosures.

Name: SITUSAMC HOLDINGS CORPORATION
norm: situsamc holdings
Domain: situsamc.com

Name: SITUSAMC HOLDINGS CORPORATION
norm: situsamc holdings
Domain: situsamc.com

Discovered: Nov 12, 2025
Breach occurred: Nov 12, 2025 – Nov 19, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 28, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: notified law enforcement and governmental authorities
Initial access: exploit_public_facing

During the incident: Commenced an investigation into the nature and scope of the incident
Notified law enforcement
Took measures to further harden and enhance our security
Offering identity theft protection services through IDX
Changes made: Took measures to further harden and enhance our security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 8 states

View merged incident ↗

Nebraska State AGJan 28 · first · this page

California State AG+23d

Montana State AG+41d

Indiana State AG+41d

California State AG+41d

Oregon State AG+54d

California State AG+65d

Maine State AG+65d

Texas State AG+68d

New Hampshire State AG+68d

Pattern: first filing Jan 28 (NE), last Apr 6 (NH) — a 68-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 16 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/68654f3d-5c88-4783-836c-14ee9d567042.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 28, 2026
Raw hash: 09f6e113b8dda46b0a94434f7334f97e74157bcbba66d921e641886048a13d86

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entitySITUSAMC HOLDINGS CORPORATION

Victim entitySITUSAMC HOLDINGS CORPORATION

Incidentdiscovered Nov 12, 2025

Stated responseCommenced an investigation into the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov