Most of the roughly 662,792 people covered by the SitusAMC data breach settlement were never SitusAMC customers. They banked with JPMorgan Chase, Citi and other lenders that sent borrower files to SitusAMC to process. Claims are open, and a flat cash payment estimated at $75 needs no receipts — but every cash benefit here requires a claim form, and doing nothing pays nothing.
Status: Claims open | Claim deadline November 6, 2026 | Opt out or object by October 22, 2026 | Fund: $5,300,000
What Happened
SitusAMC Holdings Corporation is a New York-based technology and services provider for the real estate finance industry. Banks and lenders send it borrower and asset data to process, which is why the people affected here are mostly not its own customers.
According to the court-approved notice, on or about November 12, 2025 SitusAMC discovered it had been the victim of a data incident involving unauthorized access to and exfiltration of information from its systems. What was taken varied person by person, but the notice lists names, dates of birth, Social Security or individual taxpayer identification numbers, driver’s license numbers, state identification numbers or other government-issued identifiers, financial account numbers, medical records, and health insurance policy numbers.
SitusAMC notified its clients on November 22, 2025 and confirmed the incident publicly about two days later, saying no ransomware was deployed, its operations were not disrupted, and it had notified and was cooperating with the FBI. Customers of major bank clients — including JPMorgan Chase and Citi, and reportedly Morgan Stanley — were among those whose data was potentially involved. Mailed notices to affected individuals began going out on January 28, 2026 with an offer of complimentary credit monitoring.
The consolidated case is In re SitusAMC Holdings Corporation Data Breach Litigation, No. 1:25-cv-09748, in the U.S. District Court for the Southern District of New York. The complaint alleges SitusAMC failed to take reasonable steps to safeguard the data and asserts negligence, negligence per se, breach of third-party beneficiary contract, unjust enrichment, claims for declaratory and injunctive relief, and violations of certain consumer protection statutes, on behalf of a nationwide class and a California subclass.
SitusAMC denies all material allegations and specifically denies that it failed to protect any data, had inadequate data security, was unjustly enriched, breached any duty or contract, or violated any consumer protection statute. The notice states that the court did not decide in favor of either side. No court has found SitusAMC liable.
Who Is In the Class
The court defined the settlement class as all persons in the United States who were sent notice of the data incident as identified in the Class List. Membership turns on whether SitusAMC’s records placed you on that list — not on whether you can show you were harmed, and not on whether you had any direct relationship with SitusAMC. Court filings in support of the settlement reported a class of roughly 662,792 people.
Three groups are excluded: SitusAMC’s executive leadership team; the judge assigned to the case, that judge’s immediate family and court staff; and any class member who timely and validly opts out.
Class members who resided in California between November 12, 2025 and November 22, 2025 qualify for an extra benefit tier. That is a tier within a nationwide class, not a separate settlement.
The Four Benefits
SitusAMC will establish a settlement fund of $5,300,000. The fund first pays court-approved attorneys’ fees and costs, service awards for the class representatives and settlement administration costs; the net remaining funds pay class member benefits.
| Credit monitoring — one year | Automatic. Every class member already received an enrollment code. It includes real-time credit file monitoring at a credit bureau, dark web scanning with notification of potential misuse, public record monitoring, identity restoration and recovery services, and $1,000,000 in identity theft insurance with no deductible. No claim form needed. |
| Cash Payment A — documented losses | Up to $5,000 for actual, documented, unreimbursed out-of-pocket losses resulting from the incident — unreimbursed bank or card charges, costs to replace a driver’s license, Social Security number or other identification, credit report costs, and credit monitoring or identity theft protection first purchased between November 12, 2025 and the claims deadline. |
| Cash Payment B — flat cash | Estimated at $75, no proof or explanation required. |
| California Statutory Payment | $50 for class members who resided in California between November 12 and November 22, 2025, subject to downward pro rata adjustment. |
The cash tiers stack. The notice describes Cash Payment B as available in lieu of or in addition to Cash Payment A, and the California payment as available in addition to both, so a California class member with documented losses can select all three on one form. The settlement administrator decides whether each claim is valid, and only valid claims are paid.
Class Counsel will ask the court to approve attorneys’ fees of up to one-third of the fund, plus reimbursement of reasonable costs, and service awards of up to $2,500 for each class representative. If approved, those come out of the $5,300,000 before class member payments are made.
The $75 Is an Estimate, and the Arithmetic Matters
The notice is explicit that $75 is an estimate and that the figure could be higher or lower depending on, among other things, the number of valid claims submitted. Set that against a class reported at roughly 662,792 people and a $5,300,000 fund that pays fees, service awards and administration costs first, and the caveat is worth taking seriously. Read the $75 as a stated estimate subject to a stated fund, not as a floor.
Why This One Is Gated Even Though the Cash Needs No Receipts
The online claim portal asks for a Login ID and a PIN before anything else can be entered, and both are printed on the notice that was mailed to you. Someone who never received a notice, or who threw it away, cannot simply file online.
That holds even though the flat $75 payment itself needs no documentation. “No documentation” is not the same as “no proof”: the administrator-issued credentials are what establish that you are on the Class List. If you cannot locate your Login ID and PIN, the contact page on the official settlement website is the route to request them or to have a paper Claim Form sent — the administrator asks for your full name and mailing address to look you up.
The $5,000 tier needs documentation on top of the credentials. The notice requires third-party documentation, such as receipts, to verify each cost claimed. Self-prepared documents may be submitted to clarify or support other documentation, but the notice states plainly that self-prepared documents by themselves are not sufficient to file a valid claim. Credit monitoring or identity theft protection purchases also need a separate written statement explaining why you bought them.
The paper Claim Form offers PayPal, Venmo, Zelle or a physical check, so choosing an electronic option means supplying the matching email address or mobile number.
The Release Reaches Your Bank, Too
This is the part worth reading before the October date passes. The release covers not only SitusAMC and its affiliates but also its clients and customers whose data was involved in the incident, along with any business associates or covered entities that owned or controlled affected data — and those parties are named as third-party beneficiaries entitled to enforce it.
So staying in the class settles claims relating to this incident against the bank or lender that sent your data to SitusAMC, not only against SitusAMC itself. The only way to keep the right to sue separately is a written opt-out request postmarked by October 22, 2026, which also forfeits every settlement benefit.
Dates
- October 22, 2026 — deadline both to exclude yourself by mailing a written opt-out request and to file an objection. Objecting is not opting out: an objector stays in the class, can still submit a Claim Form, and simply tells the court what they dislike about the deal.
- November 6, 2026 — claim deadline. Online Claim Forms must be submitted by that date and mailed forms postmarked no later than it. The court-approved notice gives the date without a time of day or a timezone, so treat the date itself as the cutoff rather than assuming a late-night grace period.
- November 11, 2026 at 10:00 a.m. ET — final approval hearing at the U.S. District Court for the Southern District of New York in Manhattan. The notice warns the date and time may change without further notice.
A hearing taking place is not the same as approval being granted. If the court approves the settlement there may be appeals, and the notice is candid that it is unknown whether appeals will be filed or how long they would take. Benefits are distributed only after final approval and after any appeals are resolved. No payment date had been announced as of August 23, 2026.
How to File
File on the official settlement website, SAMCDataSettlement.com. Log in with the Login ID and PIN from your notice, confirm your name and contact information, then check the boxes for the benefits you are claiming: documented losses, the flat cash payment, the California statutory payment, or any combination. If you are claiming documented losses, list each cost with the documentation you are attaching and the amount, upload the supporting records, choose your payment method and sign the attestation. A paper Claim Form can be downloaded from the same site and mailed instead.
The official site is the one linked above. If an email or a search result offers to file a SitusAMC claim for you somewhere else, treat it with suspicion. Filing is free, and no legitimate administrator charges a fee to process a settlement payment or asks for a banking password.
Source and credit: the settlement terms, deadlines and benefit tiers described above are drawn from our sister site’s reporting — OpenClassActions.com: SitusAMC $5.3M Data Breach Settlement — $75 or Up to $5,000 — which tracks this case against the court-approved notice and the official settlement website and is updated as the court rules.
Frequently Asked Questions
Can I claim the flat $75 payment and the documented loss payment together?
Yes. The notice describes Cash Payment B as available in lieu of or in addition to Cash Payment A, and the Claim Form carries a separate checkbox for each, so a class member with documented out-of-pocket losses can select both. California residents who lived in the state between November 12, 2025 and November 22, 2025 can add the $50 California Statutory Payment on top of either or both. The credit monitoring benefit is separate again and does not require a claim.
I never got a notice from SitusAMC. Am I in the class?
The court defined the settlement class as all persons in the United States who were sent notice of the data incident as identified in the Class List, so membership turns on whether SitusAMC records placed you on that list rather than on whether you were a SitusAMC customer. Most affected people were customers of SitusAMC bank and lender clients. If you are unsure, the contact page on the official settlement website is the route to ask the settlement administrator.
Is the $75 flat cash payment guaranteed?
No. The notice calls it an estimate and says the amount could be higher or lower depending on, among other things, the number of valid claims submitted. The $5,300,000 fund pays court-approved attorneys fees and costs, service awards and administration costs first, and class member benefits come out of what remains, so a high claim rate against a class reported at roughly 662,792 people would push the per-person figure down.
The credit monitoring was automatic. Why do I need to file anything?
Because the cash benefits are not automatic. The one year of credit monitoring arrived with an enrollment code and needs no claim form, but every cash payment in this settlement requires a timely Claim Form submitted by November 6, 2026. A class member who does nothing receives no money and is still bound by the release.
Does this settlement release my claims against my bank?
Potentially, yes. The release covers not only SitusAMC and its affiliates but also its clients and customers whose data was involved in the incident, and those parties are named as third-party beneficiaries entitled to enforce it. Staying in the class settles claims relating to this incident against the bank or lender that sent your data to SitusAMC. The only way to preserve those claims is a written opt-out request postmarked by October 22, 2026, which forfeits all settlement benefits.
Sources
- Official settlement website — SAMCDataSettlement.com, including the court-approved Notice of Proposed Class Action Settlement, the Claim Form and general instructions, and the settlement FAQs.
- In re SitusAMC Holdings Corporation Data Breach Litigation, No. 1:25-cv-09748, U.S. District Court for the Southern District of New York.
- Settlement Agreement, Section XIII (release), linked from the official settlement website.
- OpenClassActions.com — SitusAMC $5.3M Data Breach Settlement — $75 or Up to $5,000.
Legal Disclaimer
This article is for informational purposes only and is not legal advice. OpenClassActions.org is a consumer news site, not a law firm and not the settlement administrator, and is not affiliated with any party to the case described. The allegations are allegations; the defendants deny wrongdoing and no court has decided the merits. Deadlines, benefit amounts and payment timing can change as the court and the administrator act, so confirm current status on the official settlement website. You never need to pay anyone to file a claim or to receive a settlement payment.