SITUSAMC HOLDINGS CORPORATION

SitusAMC Holdings Corporation notified the California Attorney General of unauthorized access to its IT network between November 12-19, 2025. An external actor acquired data including names, addresses, dates of birth, and Social Security numbers. The company engaged third-party experts, notified law enforcement, and contained the incident. Identity theft protection services are being offered to affected individuals.

SitusAMC Holdings Corporation disclosed unauthorized access to its IT network by a third party between November 13-21, 2025. The company became aware of the incident on November 12, 2025. Affected data may include names, addresses, dates of birth, government-issued IDs (such as driver's license or SSN), and financial account information. The company engaged third-party experts, notified law enforcement, and is offering identity protection services.

SitusAMC Holdings Corporation, a business sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2025-11-12 and filed notice on 2026-02-20. 20,587 Washington residents were affected. 100 days elapsed between awareness and notification. -1 days to identify the breach. 9 days to contain the breach.

Affected (this filing): 20,587

SitusAMC Holdings Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2026-02-20. The breach occurred during 11/13/2025. The breach was discovered on 11/12/2025. 250 individuals were affected. Notice was sent on 2/20/2026.

Affected (this filing): 250

SitusAMC Holdings Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2025-11-12 and was reported on 2026-03-10. 263 Indiana residents were affected.

Affected (this filing): 263

SitusAMC Holdings Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2025-11-12 and was reported on 2026-03-10. 263 Indiana residents were affected.

Affected (this filing): 263

SitusAMC Holdings Corporation experienced unauthorized access to its IT network between November 13-21, 2025, discovered on November 12, 2025. An unauthorized third party acquired data including names, addresses, dates of birth, government IDs, and financial account information. The company engaged third-party experts, notified law enforcement, and contained the incident. Identity protection services are being offered to affected individuals.

SitusAMC Holdings Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2026-03-23. The breach occurred during 11/13/2025. The breach was discovered on 2/17/2026. 658,333 individuals were affected. Notice was sent on 3/10/2026.

Affected (this filing): 658,333

SitusAMC Holdings Corporation notified the California AG of unauthorized access to its IT network. An external actor acquired data between Nov 13-21, 2025, after SitusAMC became aware on Nov 12, 2025. Affected data may include names, addresses, DOBs, SSNs, driver's license numbers, and financial account info. The company engaged third-party experts, notified law enforcement, and is offering 24 months of identity protection via IDX.

SitusAMC Holdings Corporation, a real-estate finance services company, reported an external system breach (hacking) to the Maine Attorney General. The incident occurred on 2025-11-13 and was discovered on 2026-03-05. 40 Maine residents were notified in writing on 2026-03-10. The total nationwide affected count was not disclosed in this Maine filing, and the specific data elements compromised were not enumerated in the form. IDX is providing 24 months of credit monitoring and identity theft protection services. The notice was filed by outside counsel Kimberly Peretti of Alston & Bird LLP.

Affected (this filing): 40

SitusAMC Holdings Corporation based in New York, New York, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-03-31 and reported on 2026-04-06. 36,827 Texas residents were affected. 662,701 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via U.S. Mail.

Affected (this filing): 36,827

SitusAMC Holdings Corporation notified the New Hampshire Attorney General of a data security incident affecting 51 New Hampshire residents. Unauthorized access occurred between November 13 and 21, 2025. Personal information, including names, SSNs, driver's license numbers, and financial account data, was accessed. SitusAMC engaged third-party experts, notified law enforcement, and offered 24 months of credit monitoring.

Affected (this filing): 51