SitusAMC $5.3M Data Breach Settlement — $75 or Up to $5,000
Data Breach · Claims Open HOT
SitusAMC $5.3 Million Data Breach Settlement: About $75 Cash, Up to $5,000 Documented, Plus a Year of Credit Monitoring
PublishedAugust 23, 2026
This settlement resolves claims against SitusAMC, the real estate finance technology and services firm behind mortgage and asset data for major banks, over the November 2025 data incident. If SitusAMC sent you a notice — most people who got one were customers of its bank clients, not of SitusAMC — you can claim a flat cash payment estimated at $75 with no documentation, up to $5,000 for documented losses, and $50 more if you lived in California, but only if you file by November 6, 2026.
Source: In re SitusAMC Holdings Corporation Data Breach Litigation (court-approved settlement notice)
Claims are open. A Claim Form must be submitted online by November 6, 2026, or mailed so that it is postmarked by that date; the court-approved notice gives the date without stating a filing-time cutoff or a timezone. The deadline to opt out or to object is more than two weeks earlier, October 22, 2026. The court has authorized notice to the class but has not decided whether to approve the settlement: the final approval hearing is scheduled for November 11, 2026 at 10:00 a.m. Eastern Time in Manhattan, and the notice warns the date and time may change without further notice. No payments have been issued and no payment date has been announced. If you were sent a notice about the SitusAMC data incident, the step to take now is to file — the one year of credit monitoring arrived automatically, but every cash payment in this settlement requires a Claim Form, so a class member who does nothing receives no money and is still bound by the release.
StatusClaims OpenNotice underway · final approval hearing November 11, 2026 · no ruling yet
Claim DeadlineNovember 6, 2026Online or postmarked by the same date · the notice states no filing-time cutoff · opt-out and objection deadline is earlier, October 22, 2026
Estimated Payout~$75 or up to $5,000A flat cash payment estimated at $75 with no documentation, or documented out-of-pocket losses up to $5,000, from a $5,300,000 fund · California residents may add $50, subject to pro rata reduction · one year of credit monitoring came automatically
Proof RequiredYesA Login ID and PIN from your notice are required to file online · the $5,000 tier also needs third-party documentation such as receipts
What Changed Recently?
The court authorized notice to the settlement class and the claim process opened, with a November 6, 2026 deadline and an official settlement website now live. That is the development here. It also resolves the open question this site flagged in July, when the parties had asked for preliminary approval but the judge wanted more detail on the notice plan and the administration budget first: at that point there was no settlement website, no claim form and no deadline. All three now exist.
The consolidated case is In re SitusAMC Holdings Corporation Data Breach Litigation, No. 1:25-cv-09748, in the U.S. District Court for the Southern District of New York.
SitusAMC denies all material allegations in the complaint and specifically denies that it failed to protect any data, had inadequate data security, was unjustly enriched, breached any duty or contract, or violated any consumer protection statute. The notice states that the court did not decide in favor of either side and that the parties agreed to settle to avoid the costs, risks and uncertainties of continuing the case. No court has found SitusAMC liable.
What Is This Settlement About?
SitusAMC Holdings Corporation is a New York-based technology and services provider for the real estate finance industry, which is why the people affected here are mostly not its own customers. Banks and lenders send SitusAMC borrower and asset data to process; when that data was taken, the individuals behind it were customers of those institutions.
According to the notice, on or about November 12, 2025 SitusAMC discovered that it had been the victim of the data incident, which involved unauthorized access to and exfiltration of information from its systems. What was taken varied person by person, but the notice lists names, dates of birth, Social Security or individual taxpayer identification numbers, driver's license numbers, state identification numbers or other government-issued identifiers, financial account numbers, medical records, and health insurance policy numbers.
SitusAMC notified its clients on November 22, 2025 and confirmed the incident publicly about two days later, saying no ransomware was deployed, its operations were not disrupted, and it had notified and was cooperating with the FBI. Customers of major bank clients — including JPMorgan Chase and Citi, and reportedly Morgan Stanley — were among those whose data was potentially involved. Mailed notices to affected individuals began going out on January 28, 2026 with an offer of complimentary credit monitoring.
The complaint alleges that SitusAMC failed to take reasonable steps to safeguard the data, and asserts negligence, negligence per se, breach of third-party beneficiary contract, unjust enrichment, claims for declaratory and injunctive relief, and violations of certain consumer protection statutes, on behalf of a nationwide class and a California subclass. The first proposed class action was filed on November 24, 2025 by a JPMorgan Chase customer; the cases were consolidated in December 2025. Our earlier report on how the SitusAMC class actions came together covers that history in more detail.
The combination that matters here is a name paired with a Social Security number. An account number can be changed and a card reissued; a Social Security number generally cannot. That is why the settlement's non-cash benefit is monitoring rather than a one-time fix, and it is the same pattern behind the NJ Lenders data breach settlement and other lending-sector cases we track on the data breach settlements tracker.
Who Qualifies?
The court defined the settlement class as all persons in the United States who were sent notice of the data incident as identified in the Class List. Membership turns on whether SitusAMC's records placed you on that list, not on whether you can show you were harmed and not on whether you had any direct relationship with SitusAMC. In practice that is why the Login ID and PIN printed on your notice are what unlock the online filing process. Court filings in support of the settlement reported a class of roughly 662,792 people.
Three groups are excluded: SitusAMC's executive leadership team; the judge assigned to the case, that judge's immediate family and court staff; and any class member who timely and validly opts out.
A subset of the class qualifies for an extra benefit. Class members who resided in California between November 12, 2025 and November 22, 2025 may also elect the California Statutory Payment described below. That is a benefit tier within a nationwide class, not a separate settlement.
How Much Can You Get?
SitusAMC will establish a settlement fund of $5,300,000. The fund first pays court-approved attorneys' fees and costs, service awards for the class representatives, and settlement administration costs; the net remaining funds pay the class member benefits. There are four benefits, and the first one is already in your hands.
Credit monitoring — one year, automatic. Every class member automatically received an enrollment code for one year of credit monitoring. It includes real-time monitoring of your credit file at a credit bureau, dark web scanning with notification of potential misuse, public record monitoring, identity restoration and recovery services, and $1,000,000 in identity theft insurance with no deductible. No claim form is needed for this piece — the code was sent to you.
Cash Payment A — documented losses, up to $5,000. Reimbursement of actual, documented, unreimbursed out-of-pocket losses resulting from the data incident. The notice's list of qualifying costs includes unreimbursed charges from banks or credit card companies; unreimbursed costs to replace a driver's license, Social Security number or other identification; unreimbursed costs for credit reports; and unreimbursed costs for credit monitoring and identity theft protection first purchased between November 12, 2025 and the claims deadline, which additionally require proof of purchase plus a written statement that you bought the service primarily because of this incident.
Cash Payment B — flat cash, estimated at $75. A one-time payment with no proof or explanation required. The notice is explicit that $75 is an estimate and that the figure could be higher or lower depending on, among other things, the number of valid claims submitted. Against a class reported at roughly 662,792 people and a $5,300,000 fund that pays fees, service awards and administration costs first, that caveat is worth taking seriously.
California Statutory Payment — $50. Class members who resided in California between November 12, 2025 and November 22, 2025 may also elect a $50 cash payment, subject to downward pro rata adjustment based on the number of valid claims.
The cash tiers stack. The notice describes Cash Payment B as available in lieu of or in addition to Cash Payment A, and the California payment as available in addition to both, so a California class member with documented losses can select all three on one form. The settlement administrator decides whether each claim is valid, and only valid claims are paid.
Class Counsel will ask the court to approve attorneys' fees of up to one-third of the fund, plus reimbursement of reasonable costs, and service awards of up to $2,500 for each class representative. If approved, those amounts come out of the $5,300,000 before class member payments are made.
What Proof or Notice ID Is Required?
This page is marked proof-required, and the reason is the login screen rather than the benefit description. The online claim portal asks for a Login ID and a PIN before anything else can be entered, and both are printed on the notice that was mailed to you. Someone who never received a notice, or who threw it away, cannot simply file online.
That holds even though the flat $75 payment itself needs no documentation. "No documentation" is not the same as "no proof": the administrator-issued credentials are what establish that you are on the Class List, so a settlement with a documentation-free cash tier can still be gated. If you cannot locate your Login ID and PIN, the contact page on the official settlement website is the route to request them or to have a paper Claim Form sent; the administrator asks for your full name and mailing address to look you up.
The $5,000 tier needs documentation on top of the credentials. The notice requires third-party documentation, such as receipts, to verify each cost you claim. Self-prepared documents may be submitted to clarify or support other documentation, but the notice states plainly that self-prepared documents by themselves are not sufficient to file a valid claim. The Claim Form asks you to describe each item of documentation you are providing and the amount it supports. Credit monitoring or identity theft protection purchases also need that separate written statement about why you bought them.
The paper Claim Form offers PayPal, Venmo, Zelle or a physical check as payment methods, so choosing an electronic option means supplying the matching email address or mobile number.
What Is the Deadline?
November 6, 2026 is the claim deadline. Online Claim Forms must be submitted by that date, and mailed forms must be postmarked no later than that date. The court-approved notice gives the date without a time of day or a timezone, so treat the date itself as the cutoff rather than assuming a late-night grace period.
Important: the deadlines here are not all the same date. October 22, 2026 is the deadline both to exclude yourself from the class by mailing a written opt-out request and to file an objection — more than two weeks before the claim deadline. Objecting and opting out are not the same thing: if you opt out you keep the right to sue SitusAMC separately and receive no settlement benefits, while if you object you stay in the class, can still submit a Claim Form, and simply tell the court what you dislike about the deal.
The release is the reason to think about that October date rather than skip past it. It covers not only SitusAMC and its affiliates but also its clients and customers whose data was involved in the incident, along with any business associates or covered entities that owned or controlled affected data — and those parties are named as third-party beneficiaries entitled to enforce it. So staying in the class settles claims relating to this incident against the bank or lender that sent your data to SitusAMC, not only against SitusAMC itself.
How Do You Take Action?
File on the official settlement website, SAMC Data Settlement. Log in with the Login ID and PIN from your notice, confirm your name and contact information, then check the boxes for the benefits you are claiming: documented losses, the flat cash payment, the California statutory payment, or any combination of them. If you are claiming documented losses, list each cost with the documentation you are attaching and the amount, and upload the supporting records. Choose your payment method, then sign the attestation.
A paper Claim Form can be downloaded from the same site and mailed instead. The site's contact page handles a lost Login ID or PIN, a paper form request, or a question about whether you are on the Class List. Keep a copy of whatever you submit.
One caution carried over from before this settlement had a website: the official site is the one linked above. If an email or a search result offers to file a SitusAMC claim for you somewhere else, treat it with suspicion.
What Happens Next?
The opt-out and objection window closes October 22, 2026, and the claim window closes November 6, 2026. The court then holds the final approval hearing on November 11, 2026 at 10:00 a.m. Eastern Time at the U.S. District Court for the Southern District of New York in Manhattan, where it will decide whether to approve the settlement, how Class Counsel should be paid, and whether to award the service awards, and will consider any objections. A hearing taking place is not the same as approval being granted, and the notice says the date and time may change without further notice.
You do not have to attend. Class Counsel will answer the court's questions, and a class member who filed a timely written objection will have it considered whether or not they appear.
If the court approves the settlement, there may be appeals, and the notice is candid that it is unknown whether appeals will be filed or how long they would take to resolve. Benefits are distributed if final approval is granted and after any appeals are resolved. No payment date had been announced as of August 23, 2026.
Sources and Verification
This page is based on the official settlement website and the court-approved settlement documents:
Official Data Incident Settlement Claim Form and general instructions
Frequently asked questions on the official settlement website
Settlement Agreement, Section XIII (release), linked from the official settlement website
In re SitusAMC Holdings Corporation Data Breach Litigation, No. 1:25-cv-09748, U.S. District Court for the Southern District of New York
OpenClassActions.com is a consumer news site and is not the settlement administrator or a law firm.
Questions
Can I claim the flat $75 payment and the documented loss payment together?
Yes. The notice describes Cash Payment B as available in lieu of or in addition to Cash Payment A, and the Claim Form carries a separate checkbox for each, so a class member with documented out-of-pocket losses can select both. California residents who lived in the state between November 12, 2025 and November 22, 2025 can add the California Statutory Payment on top of either or both. The credit monitoring benefit is separate again and does not require a claim.
I never got a notice from SitusAMC. Am I in the class?
The court defined the settlement class as all persons in the United States who were sent notice of the Data Incident as identified in the Class List, so membership turns on whether SitusAMC's records placed you on that list rather than on whether you were a SitusAMC customer. Most affected people were customers of SitusAMC's bank and lender clients rather than of SitusAMC itself. If you are unsure whether you are on the list, the contact page on the official settlement website is the route to ask the settlement administrator.
Is the $75 flat cash payment guaranteed?
No. The notice calls it an estimate and says the amount could be higher or lower depending on, among other things, the number of valid claims submitted. The $5,300,000 fund pays court-approved attorneys' fees and costs, service awards and settlement administration costs first, and the class member benefits come out of what remains, so a high claim rate against a class reported in court filings at roughly 662,792 people would push the per-person figure down.
The credit monitoring is automatic, so why is this page marked proof required?
Because the cash benefits are not automatic. The online claim portal opens by asking for a Login ID and PIN printed on the notice that was mailed to you, so a class member who never received the notice or discarded it cannot file online without first requesting those credentials from the settlement administrator. The credit monitoring enrollment code was sent separately and needs no claim form, but every cash payment in this settlement requires a timely Claim Form.
What happens if I do nothing?
You receive no cash payment, and you still give up the right to sue SitusAMC and the released parties over claims relating to the Data Incident if the settlement is approved. The release in this settlement is unusually broad because it also covers SitusAMC's clients and customers whose data was involved. The only way to keep the right to sue separately is to submit a written opt-out request postmarked by October 22, 2026, which also means giving up all settlement benefits.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
$5,300,000 Common fund covering the cash payments, attorneys' fees and costs, service awards, and settlement administration costs
Case Title
In re SitusAMC Holdings Corporation Data Breach Litigation
Case Number
1:25-cv-09748
Court
U.S. District Court, Southern District of New York
Final Approval Hearing
November 11, 2026 at 10:00 AM ET Manhattan courthouse — the date and time may change without further notice
NJ Lenders Data Breach Settlement: The closest comparison — another mortgage lender breach of names and Social Security numbers, with cash and monitoring. See who qualifies →
On Q Financial Data Breach Settlement: About $50 with no documentation, or up to $5,000 documented, for clients of the Arizona mortgage lender. Check the claim tiers →
Doxim Data Breach Settlement: A banking vendor breach that reached customers of institutions who had never heard of the vendor. Read more →
Sansone Group Data Breach Settlement: A flat $45 or up to $3,500 documented after the cyberattack on the St. Louis commercial real estate firm. See the claim tiers →
Data Breach Settlements Tracker: Every open data breach claim window OCA is tracking, sorted by deadline. View the tracker →