Possible Data Breach Hits Clients of Major US Banks

The New York Times has reported, citing informed sources, that client data from several major US banks, including JPMorgan Chase, Citigroup and Morgan Stanley, may have been compromised following a cyberattack on a technology services provider.

CITUS AMC, a New York–based firm that provides advisory and technology solutions to lenders in the real-estate finance sector, confirmed on Saturday that it suffered a cyber intrusion on 12 November. The company stated that information from its systems was accessed and that data linked to some of its clients may also have been affected.

CITUS AMC did not identify any specific financial institutions impacted by the breach. Requests for comment sent to JPMorgan Chase, Citigroup and Morgan Stanley were not immediately answered, according to Reuters.

The company said the compromised data included corporate information connected to certain client transactions, such as accounting documents and legal contracts.

The New York Times also reported remarks from FBI official Kash Patel, who stated that federal investigators are working closely with affected institutions and partners to evaluate the potential impact. Current assessments have not indicated any operational disruption to banking services.

CITUS AMC added that the incident has been contained and that all services are fully operational. The firm clarified that the attack did not involve any ransomware or encryption-based malware.