SitusAMC data breach settlement
Yes. The SitusAMC data breach settlement is real: a $5.3 million class action settlement in federal court, Southern District of New York, run by a court-appointed settlement administrator. The claim deadline, 6 November 2026, has passed and the judge’s final decision has not been posted.
The claim deadline was yesterday, 6 November 2026, and the final approval hearing is now set for 17 November 2026 at 2:00 p.m. in Courtroom 15C (moved from 11 November).
SitusAMC is a mortgage services firm that works behind the scenes for lenders. It is not AMC Theatres, which has no data breach settlement.
Is it real?
Yes. The case is In re SitusAMC Holdings Corporation Data Breach Litigation, case number 1:25-cv-9748, in the United States District Court, Southern District of New York. A court-appointed settlement administrator runs it, and its only official site is samcdatasettlement.com.
How the real notice reached people. Class members got a postcard notice by mail with a unique Class Member Login ID and PIN, needed for the claim form, and an enrollment code for one year of credit monitoring. The official site does not mention an email notice or name a sender address.
To tell a real message from a scam:
- The only official site is samcdatasettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
- Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
- Nobody needs your passwords.The administrator never asks for your SitusAMC password, your online banking login or a code texted to you. Payment details go only into the claim form on samcdatasettlement.com.
- Check by phone.If you aren’t sure a message is real, call the administrator on 1-(833) 421-7329, the number on samcdatasettlement.com, not one in the message.
- Claims have closed.The deadline was 6 November 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on samcdatasettlement.com instead.
Who qualifies
All persons in the United States who were sent notice of the Data Incident as identified in the Class List. SitusAMC's executive leadership team, the judge and family and staff, and people who opted out are excluded.
It covers people in the United States only (with a California subclass benefit). If you live elsewhere, you are not part of it, whatever a message says.
How much
The total settlement is $5,300,000. What each person can claim:
| Benefit | Amount | Notes |
|---|---|---|
| Credit Monitoring | one year | automatic: every class member already received an enrollment code; includes $1,000,000 identity theft insurance |
| Cash Payment A: Documented Losses | up to $5,000 | unreimbursed out-of-pocket losses with third-party documentation, e.g. bank charges, ID replacement, credit reports or monitoring bought from November 12, 2025 |
| Cash Payment B: Flat Cash | estimated to be $75 | no proof needed; can be claimed instead of or in addition to Payment A; may be higher or lower |
| California Statutory Payment | $50 | residents of California between November 12 and November 22, 2025; subject to downward pro-ration |
An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.
Deadline and payout
- Claim deadline: (passed).
- Opt-out and objection deadline: .
- Final approval hearing: .
Payout. The administrator has not published a payment date; payments come only after final approval and any appeals.
The administrator: “Class Member Login ID and PIN found on the postcard notice sent to you.”
Filing and payment
- The claim deadline (online or postmarked) was 6 November 2026, so new claims are now late.
- Claims needed the Class Member Login ID and PIN from the postcard notice, or one requested from the Settlement Administrator.
- Credit monitoring can still be activated with the enrollment code on the postcard (Enrollment Form on www.SAMCDataSettlement.com).
- Questions go to [email protected] or 1-(833) 421-7329.
Official site: samcdatasettlement.com. Phone: 1-(833) 421-7329. Mail: SitusAMC Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799.
The breach, and what to do today
On or about November 12, 2025, SitusAMC, a real estate finance technology and services firm, discovered that information including personal data had been accessed and taken from its systems.
What was exposed: names; dates of birth; Social Security or individual taxpayer identification numbers; driver's license numbers; state identification numbers or other government issued identifiers; financial account numbers; medical records; health insurance policy numbers.
A settlement pays for what already happened. The data is still out there, so do these now:
- Freeze your credit.In the US it’s free at Equifax, Experian and TransUnion, and no one can open credit in your name while it’s on. Lift it for a day when you apply for credit yourself.
- Get an IRS Identity Protection PIN.It stops anyone filing a tax return in your name with your Social Security number. Request one at irs.gov/ippin.
- Watch your statements.Look for small charges you don’t recognise and report them to your bank. Ask for a new card if a full card number leaked.
- Read your health insurance statements.Check each Explanation of Benefits for care you never had, and tell your insurer if you find any. Medical records can’t be changed like a password.
- Distrust messages about SitusAMC and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.
To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.
Not published yet
The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:
- When payments will be sent.
- Whether the judge has granted final approval (the hearing was set for 17 November 2026).
- How many people are in the settlement.
Questions
Is the SitusAMC data breach settlement legit?
Yes. It is In re SitusAMC Holdings Corporation Data Breach Litigation, case 1:25-cv-9748, in the United States District Court, Southern District of New York. A court-appointed settlement administrator runs it for the court, and the only official site is samcdatasettlement.com.
Who qualifies for the SitusAMC settlement?
All persons in the United States who were sent notice of the Data Incident as identified in the Class List. SitusAMC's executive leadership team, the judge and family and staff, and people who opted out are excluded.
How much will I get from the SitusAMC settlement?
Up to up to $5,000 for losses you can prove, or estimated to be $75 as a cash payment without receipts. The total settlement is $5,300,000. Final amounts depend on how many valid claims there are.
What is the deadline for the SitusAMC settlement?
The claim deadline was 6 November 2026. It has passed.
When will the SitusAMC settlement pay out?
The administrator has not published a payment date; payments come only after final approval and any appeals.
Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.
Sources
Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.
- SAMC Data Settlement: home, Simpluris (settlement website), read 7 Nov 2026: deadlines, hearing update to 17 Nov 2026, phone, email, postcard and Login ID/PIN.
- Long Form Notice, Simpluris (linked from settlement website), read 7 Nov 2026: fund, data types, class definition, benefits, PO box.