Last updated
SitusAMC: Cybersecurity Incident
SitusAMC, a mortgage vendor, suffered a data breach in November 2025 affecting approximately 662,000 individuals. The company agreed to a $5.3 million settlement.
- What happened
- SitusAMC, a mortgage vendor, suffered a data breach in November 2025 affecting approximately 662,000 individuals. The company agreed to a $5.3 million settlement.
- Who
- SitusAMC · USA
- When
- 2026-06-26
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For SitusAMC in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: Against a Talent Market Index of 122.7 (Hot) (up 17.8 month-on-month), Americas is at rising (+34.4pts) on signal share.
SitusAMC: 0 signals in the last 90 days; 2 tracked across 66 days.
MitchelLake in this thematic
Also at SitusAMC →
More signals across Americas
Cybersecurity Incident · Americas
Brightmoor Hospice, LLC →Brightmoor Hospice, LLC of Griffin, Georgia is notifying of a data security incident that may have exposed protected health information. It discovered suspicious activity around March 25, 2026, and public notification came October 16, 2026.
Cybersecurity Incident · Americas
Anne Arundel County, Maryland →Anne Arundel County, Maryland confirmed an August data breach after ransomware claims; an intruder stole files from government systems and the scope of exposed data is still being assessed.
Cybersecurity Incident · Americas
Arizona court system →The Arizona court system was hacked, exposing personal information of about 1.3 million people.
Cybersecurity Incident · Americas
Splunk →Splunk MCP Server contains a critical Remote Code Execution vulnerability (CVE-2026-76404, CVSS 9.1) caused by insecure deserialization in credential management, affecting versions prior to 1.2.1. Additionally, the MCP protocol specification itself contains a structural vulnerability allowing automatic fetching of attacker-controlled links. Both exposures are high-risk given the server's access to enterprise observability crown jewels (logs, alerts, dashboards, real-time search).
Cybersecurity Incident · Americas
Change Healthcare →Change Healthcare breach impacted 190 million individuals, triggering Senate passage of healthcare cybersecurity legislation (Health Care Cybersecurity and Resiliency Act of 2026) that will expand federal cyber requirements for healthcare organizations.
Cybersecurity Incident · Americas
TP-Link →US state attorneys general (Florida, Iowa, Montana, Nebraska) filed lawsuit against TP-Link alleging misleading security claims, undisclosed China ties, and exploitation of router vulnerabilities by Chinese and Russian state-backed hackers (Volt Typhoon, Flax Typhoon campaigns). Company marketed HomeShield as providing '100% safeguard' while devices contained critical vulnerabilities.
Where this lands in our work
- Executive Search: Americas →
Our Americas practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗