SitusAMC Holdings
Disclosed Jan 28, 20268 months ago662,701 affectedConfirmed
What is known
| People affected | 662,701 (as reported by the organization) |
|---|---|
| Disclosed | Jan 28, 2026 |
| Discovered | Nov 12, 2025 |
| Happened | Nov 13, 2025 |
| Attack | Hacking |
| Data exposed | Social Security numbers, Government IDs, Health, Insurance, Payment cards, Financial, Dates of birth, Addresses, Names |
| Sector | Other · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: SitusAMC Holdingsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: SitusAMC Holdingsatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: SitusAMC Holdingsjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0004960: SitusAMC Holdingsoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2026-01-28 SitusAMC Holdings Corporation Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: SitusAMC Holdingsin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jan 28 | |
| Vermont AGresidents of VT | Jan 28 | |
| California AGresidents of CA | Feb 20 | |
| Washington AGresidents of WA | Feb 20 | 20,587 |
| Oregon DOJresidents of OR | Feb 20 | 250 |
| California AGresidents of CA | Mar 10 | |
| Indiana AGresidents of IN | Mar 10 | 263 |
| Oregon DOJresidents of OR | Mar 23 | 658,333 |
| California AGresidents of CA | Apr 3 | |
| Texas AGresidents of TX | Apr 6 | 36,827 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2026-01-28-situsamc-holdings-corporation-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: [] to ["ssn","government-id","health","insurance","payment-card","financial","dob","addresses","names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 662701 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2025-11-12 · backfill source
- 2026-09-25 · disclosed: 2026-02-20 to 2026-01-28 · backfill source
- 2026-09-25 · disclosed: 2026-03-10 to 2026-02-20 · backfill source
- 2026-09-25 · disclosed: 2026-04-03 to 2026-03-10 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.