Finance

JPMorgan, Citi, Morgan Stanley client data may be exposed by vendor's hack, NYT reports

Published by Global Banking & Finance Review

Posted on November 23, 2025

2 min read

· Last updated: January 20, 2026

Add as preferred source on Google
JPMorgan, Citi, Morgan Stanley client data may be exposed by vendor's hack, NYT reports
Global Banking & Finance Awards 2026 — Call for Entries

(Reuters) -Client data for JPMorgan Chase, Citi, Morgan Stanley and other major banks may have been accessed in a hack of a technology vendor, the New York Times reported on Saturday, citing people

Major Banks' Client Data Exposed in Vendor Cyberattack

(Reuters) -Client data for JPMorgan Chase, Citi, Morgan Stanley and other major banks may have been accessed in a hack of a technology vendor, the New York Times reported on Saturday, citing people familiar with the matter. 

SitusAMC said in a statement on its website on Saturday that it had been the subject of a cyberattack on November 12, compromising certain information from its systems and that "data relating to some of our clients' customers may also have been impacted."

The New York-based vendor for real estate lenders did not identify any of its affected clients.

JPMorgan Chase, Citi and Morgan Stanley did not immediately respond to Reuters requests for comment.

SitusAMC said the affected data included corporate information tied to some clients' dealings with the company, including items like accounting documents and legal contracts.

"We remain focused on analyzing any potentially affected data," Michael Franco, SitusAMC chief executive said in a statement to the New York Times, adding that the company had notified law enforcement.

FBI Director Kash Patel said in a statement, according to the newspaper: "While we are working closely with affected organizations and our partners to understand the extent of potential impact, we have identified no operational impact to banking services."

Reuters could not immediately reach the FBI for comment. 

The SitusAMC statement said the incident had been contained and services were fully operational, adding that no encrypting malware was involved.

(Reporting by Devika Nair in Bengaluru; Editing by Jacqueline Wong and William Mallard)

Key Takeaways

  • JPMorgan, Citi, and Morgan Stanley client data potentially exposed.
  • SitusAMC, a real estate vendor, was hacked on November 12.
  • Compromised data includes accounting and legal documents.
  • FBI is investigating but reports no operational banking impact.
  • SitusAMC services remain fully operational post-incident.

Frequently Asked Questions

What is cybersecurity?
Cybersecurity refers to the practice of protecting systems, networks, and programs from digital attacks. It involves implementing measures to safeguard sensitive data and ensure the integrity of information systems.
What is a data breach?
A data breach occurs when unauthorized individuals gain access to sensitive, protected, or confidential data. This can lead to data theft, loss of privacy, and potential financial harm to individuals and organizations.
What is a technology vendor?
A technology vendor is a company that provides technology products or services to other businesses. This can include software, hardware, or IT services that help organizations operate efficiently.
What is data protection?
Data protection involves safeguarding personal data from misuse, loss, or unauthorized access. It includes legal and regulatory measures to ensure that individuals' privacy is respected and maintained.
What is a cyberattack?
A cyberattack is an attempt to damage, disrupt, or gain unauthorized access to computer systems, networks, or devices. These attacks can result in data breaches, financial loss, and operational disruptions.

Tags

Related Articles

More from Finance

Explore more articles in the Finance category