If a postcard turned up this year from a company called SitusAMC, do not bin it. You never chose that company. It had your Social Security number anyway, and there is now about $75 sitting there with your name on it.
Claims close November 6, 2026.
Here is what happened. On or about November 12, 2025, SitusAMC Holdings Corporation found out that someone had been inside its systems and pulled data out. SitusAMC is not a bank. It is the back office banks hire, a vendor that processes mortgage and real estate loan data for financial institutions. Within two weeks JPMorgan Chase, Citigroup and Morgan Stanley had all been notified that their customers’ information might be caught up in it.
The court-authorized notice lists what was exposed: names, dates of birth, Social Security or taxpayer ID numbers, driver’s license numbers, state identification numbers, financial account numbers, medical records, and health insurance policy numbers.
That is not a fragment of your file. That is the file.
SitusAMC denies it did anything wrong and settled anyway, for $5,300,000. Attorneys’ fees, service awards to the named plaintiffs, and administration costs come out of that first. What is left funds the payouts.
Flat cash: an estimated $75, no proof and no explanation required. Documented losses: up to $5,000, third-party receipts required (In re SitusAMC Holdings Corporation Data Breach Litigation, long form notice, S.D.N.Y.).
Here’s the part the postcard does not put in bold. Filing is not what binds you. The release does, and it reaches past SitusAMC. The notice defines Released Parties to include “all current and former clients and customers of the SitusAMC Persons that provided information to the SitusAMC Persons that was compromised.” Read that again. That is the lender or servicer that shipped your loan file to a vendor you were never told about. Unless you opt out by October 22, you give up claims relating to this incident against them too, claim or no claim.
So the honest math is simple. You were never going to sue your mortgage servicer over a vendor breach, and you are releasing it either way. Take the $75.
Do this now. Find the postcard, because the claim form needs the Class Member Login ID and PIN printed on it. If it is gone, call 1-833-421-7329 and ask for your numbers. File online at SAMCDataSettlement.com by November 6, 2026, or mail the form postmarked by that date.
While you are on the phone, ask for the credit monitoring enrollment code. Every class member was sent one automatically for a year of monitoring plus $1,000,000 of identity theft insurance with no deductible, and almost nobody used it. A Social Security number does not expire. Neither does the market for it.
One more thing worth knowing for next time. You cannot shop for your lender’s vendors, and you will not be told who they are until one of them loses your data. When you compare mortgage lenders, you are choosing a rate and a servicer. The plumbing behind them is not on the menu.
The court holds its final approval hearing on November 11, 2026. Money moves after that, and after any appeals. Nobody is getting paid this year.
How Candid Yak makes money. Some of the products we write about pay us if you apply or sign up through our links. That never changes our verdict, our rankings, or the numbers in this article. We call a bad deal a bad deal whether it pays us or not. Some brands shown in our comparison tools are placeholder examples while we finalize partner agreements, and we label them as such.
Sources
- In re SitusAMC Holdings Corporation Data Breach Litigation, official settlement website (Case No. 1:25-cv-9748, S.D.N.Y.)
- Notice of Proposed Class Action Settlement, In re SitusAMC Holdings Corporation Data Breach Litigation (court-authorized long form notice, 14 pages)
- FBI, Major Banks Respond to Data Breach at SitusAMC (TechRepublic, November 24, 2025)