SitusAMC Data Breach Settlement: $5.3 Million, Claims Due November 6, 2026
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
If you got a postcard about the SitusAMC data breach, this is why. SitusAMC is a back-office vendor for mortgage lenders and banks, so most people in the class never dealt with it directly. A $5.3 million settlement covers about 662,796 people. The claim form is open now, the deadline is November 6, 2026, and nobody has been paid yet.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuit Says Happened
SitusAMC provides services across the mortgage lifecycle for banks and lenders — loan fulfillment, warehouse administration, securities valuation. That is how it came to hold records on its clients' borrowers and customers.
On November 12, 2025, SitusAMC became aware of an incident that, per the settlement notice, involved unauthorized access to and exfiltration of personal information. In a statement on November 22, 2025 the company said the incident was contained and that no encrypting malware was involved. The New York Times reported that JPMorgan Chase, Citi and Morgan Stanley were notified; JPMorgan said the bank itself was not hacked.
The lawsuit alleges SitusAMC failed to take reasonable steps to protect the data, and pleads negligence, negligence per se, breach of third-party beneficiary contract, unjust enrichment and consumer-protection claims. SitusAMC denies all material allegations, and no court has found wrongdoing.
Case Details
The case is In re SitusAMC Holdings Corporation Data Breach Litigation, No. 1:25-cv-9748, in the U.S. District Court for the Southern District of New York, before Judge Lewis J. Liman. The lead case, Kelechian v. SitusAMC Holdings Corporation, was filed on November 24, 2025. As HousingWire reported on January 16, 2026, Judge Liman granted an unopposed motion consolidating eight complaints into one. The settlement website is SAMCDataSettlement.com.
Status: Settlement Open for Claims, Final Approval Hearing November 11, 2026
The deadlines are fixed dates. Claim forms must be submitted online or postmarked by November 6, 2026. Opt-outs and objections must be submitted by October 22, 2026. The Final Approval Hearing is set for November 11, 2026 at 10:00 a.m. ET at 500 Pearl Street, New York. No payments have been made: benefits go out only after final approval and after any appeals are resolved. Our news report has the full breakdown: SitusAMC’s $5.3 million settlement explained.
Don't miss the claim deadline
Claims are due by November 6, 2026. We'll email you 7 days and 1 day before the deadline.
Who Is in the Settlement Class
The court defined the class as “all persons in the United States who were sent notice of the Data Incident as identified in the Class List.” ClassAction.org puts that list at about 662,796 people. SitusAMC's executive leadership team, the judge and court staff are excluded.
The practical test is your mail. Class members were sent a postcard with a Class Member Login ID and PIN, and the online claim form needs both. Because SitusAMC works behind lenders, the earlier breach letter may have named your bank or mortgage company. If you are unsure, call the administrator toll-free at 1-(833) 421-7329.
How Much the SitusAMC Settlement Pays
Documented losses: up to $5,000 for unreimbursed costs, such as bank charges, replacement IDs, credit reports, or credit monitoring bought after November 12, 2025. Third-party documentation such as receipts is required.
Flat cash: estimated at $75, no proof needed. It can be claimed instead of or in addition to documented losses, and the amount can go up or down with the number of claims.
California payment: an extra $50 for people who lived in California between November 12 and November 22, 2025, which can be reduced if many people claim.
Credit monitoring: one year, with $1,000,000 identity theft insurance. Class members got the enrollment code automatically with their notice.
Divided across the whole class, the fund comes to roughly $8 a head before fees. The $75 estimate assumes most people will not file.
How cases like this one end
Our copy of the federal courts’ own case database covers 111,990 other personal injury casesclosed in U.S. federal district courts between 2015 and 2025, 3.6% of them filed as class actions:
- 39.9% ended in a settlement recorded by the court. Another 13.8% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 39.9% and 53.7%.
- 5.7% were decided on a motion before any trial.
- 1 in 106 reached a trial (0.9%), after a median of 23.9 months.
- Median time from filing to the end of the case: 9 months.
- Only 771 of them (0.7%) record a money award at all; the median of those is $500,000.
These are base rates for this type of case (federal other personal injury cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
SitusAMC Data Breach Timeline
- 1
November 12, 2025 — Breach Discovered
SitusAMC becomes aware of an incident in which information is taken from its systems. It notifies federal law enforcement.
- 2
November 22–24, 2025 — Statement and First Lawsuit
SitusAMC says the incident is contained and no encrypting malware was involved. Two days later, Kelechian v. SitusAMC is filed in the Southern District of New York.
- 3
January 2026 — Cases Consolidated
Judge Lewis J. Liman consolidates eight complaints as No. 1:25-cv-9748, as HousingWire reported on January 16, 2026.
- 4
June 2026 — $5.3 Million Deal Filed
The parties ask for preliminary approval. The judge requests more on administration costs. ClassAction.org reports approval on June 29, 2026.
- 5
August 13 – November 6, 2026 — Notice and Claims
Postcard notices go out on August 13, 2026. Opt-outs and objections are due October 22, 2026. Claim forms are due November 6, 2026.
- 6
November 11, 2026 — Final Approval Hearing
The court decides whether to approve the settlement and the fee request. Payments come only after approval and any appeals.
Three Things to Watch For
A breach involving big bank names and a real claim form is easy to imitate:
Look-alike claim sites
The official site is SAMCDataSettlement.com. Its claim form asks for the Login ID and PIN from your postcard. A site that asks for your full Social Security number or bank login to “verify” you is not the administrator.
“Your bank's settlement” calls
The New York Times reported that JPMorgan Chase, Citi and Morgan Stanley were notified. That makes it easy for a caller to pose as your bank. The defendant here is SitusAMC, not your bank, and nobody needs your online-banking password to pay a claim.
Fees to “speed up” payment
No payment can be made before the November 11, 2026 hearing and any appeals. Filing a claim is free. Anyone charging a fee to release your $75 or your $5,000 claim faster is not the administrator.
SitusAMC Data Breach — Questions People Actually Ask
What is the SitusAMC data breach settlement?
It is a proposed $5.3 million class settlement in In re SitusAMC Holdings Corporation Data Breach Litigation, No. 1:25-cv-9748 (S.D.N.Y.). It resolves claims over the data incident SitusAMC discovered on November 12, 2025. SitusAMC denies wrongdoing.
I never did business with SitusAMC. Why did I get a notice?
SitusAMC is a vendor to mortgage lenders and banks. Your records reached it through your lender or bank, not through anything you signed up for. The class covers people in the U.S. who were sent notice of the incident.
Is the postcard or email about this settlement legitimate?
The court-approved website is SAMCDataSettlement.com. The settlement documents are hosted by Simpluris. The toll-free number is 1-(833) 421-7329, and mail goes to P.O. Box 25226, Santa Ana, CA 92799. Check any message against those details rather than clicking its links.
How much will I get?
The flat cash payment is estimated at $75, with no proof needed. Documented losses can be reimbursed up to $5,000 with receipts. Californians who lived there between November 12 and November 22, 2025 can claim an extra $50. All amounts can change with the number of claims.
What is the claim deadline?
Claim forms must be submitted online or postmarked by November 6, 2026. The opt-out and objection deadline is October 22, 2026. If you do nothing, you get no cash but are still bound by the settlement.
When will payments be sent?
No date has been set. The Final Approval Hearing is November 11, 2026. Payments go out only if the court grants final approval and after any appeals are resolved.
What data was exposed?
It varies by person. Per the notice, it included names, dates of birth, Social Security or taxpayer ID numbers, driver's license and state ID numbers, financial account numbers, medical records and health insurance policy numbers.
What else is worth doing now?
Activate the one-year credit monitoring with the code from your notice. Consider a free credit freeze at all three bureaus. Keep receipts for any breach-related costs, since only documented losses qualify for the up-to-$5,000 payment.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Open Class Action Settlements
Settlements still accepting claims, with deadlines
Data Breach Settlement Calculator
Estimate a flat-cash or documented-loss payout
Settlement Payout Calculator
How fees and claim rates shrink a per-person share
700Credit Data Breach Settlement
Another vendor breach where you never chose the vendor