Money, explained for the rest of us.

Get our free daily email →

A mortgage vendor breach is paying $75 with no paperwork, closing November 6

By

man holding model house at desk with calculator

SitusAMC Holdings Corporation is not a lender or a loan servicer you’d recognize from a monthly statement. It’s a back-office vendor that processes loan data and paperwork for mortgage companies, which is exactly why most people who got a breach notice from it this year had never heard the name before. Now a $5.3 million settlement is open, and people who received that notice can collect an estimated $75 in cash without turning in a single receipt. The claim deadline is November 6, 2026, and not everyone with a mortgage qualifies — only the specific group SitusAMC already identified and notified.

What SitusAMC Does And What Was Exposed

SitusAMC works behind the scenes of the mortgage industry, handling loan servicing data, due diligence and technology for lenders and investors rather than dealing with homeowners directly. According to the settlement website, the company discovered on or about November 12, 2025, that hackers had gained unauthorized access to its systems and exfiltrated data. The exact information exposed varied person to person, but the case documents list names, dates of birth, Social Security or individual taxpayer identification numbers, driver’s license or state ID numbers, financial account numbers, medical records and health insurance policy numbers among the categories affected.

The case, In re SitusAMC Holdings Corporation Data Breach Litigation, No. 1:25-cv-9748, is before the U.S. District Court for the Southern District of New York. Six named plaintiffs sued on behalf of a nationwide class, alleging SitusAMC failed to reasonably safeguard the data. SitusAMC disputes that, denying it had inadequate security or broke any law, and no court has ruled on the underlying claims. Both sides agreed to a settlement agreement to avoid the cost and uncertainty of a trial.


Free retirement updates: Social Security and Medicare change every year, and nobody sends you a memo. Our free Retirement Shield newsletter breaks down what changed and what to do. Get it free in your inbox.

Who Actually Qualifies For A Payment

This is the part worth reading carefully before you get your hopes up. The court defined the settlement class narrowly: “All persons in the United States who were sent notice of the Data Incident,” according to the settlement administrator’s own FAQ. That means the payment isn’t open to every mortgage borrower or every person whose data has ever touched a lender’s system — it’s limited to the households SitusAMC and the settlement administrator already identified as affected and sent a notice to, whether by mail or email.

If you’re not sure whether you received that notice, the settlement administrator can look you up. You can reach SitusAMC Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958, by calling (833) 421-7329, or by emailing [email protected]. Excluded from the class are SitusAMC’s executive leadership team, the assigned judge’s family and court staff, and anyone who validly opts out.

It’s worth being blunt about why that distinction matters here: SitusAMC isn’t a household name like a bank or a mortgage servicer that mails you statements, so plenty of people whose loans were touched by the company somewhere in the background never received anything at all. If your name wasn’t on the notice list the administrator compiled from SitusAMC’s own records, filing a claim form won’t produce a payment — there’s no general public claim path for this settlement the way there sometimes is for a retailer breach with an open sign-up window.

How The $75 No-Paperwork Payment Works

Eligible class members have two cash options, and they aren’t mutually exclusive. Cash Payment A reimburses documented out-of-pocket losses tied to the breach — things like unreimbursed bank or credit card charges, the cost of replacing a driver’s license or Social Security card, or credit monitoring purchased because of the incident — up to $5,000, but it requires third-party proof such as receipts. Cash Payment B is the flat cash option: an estimated $75 with no documentation required at all. The settlement site is explicit that the final amount “could be higher or lower depending on, among other things, the number of valid claims submitted,” since the fund is shared.

California residents who lived in the state between November 12 and November 22, 2025, can also claim an additional $50 statutory payment, which is likewise subject to pro-rating if claims run high. The fastest way to file is the online claim form; a mailed paper form works too, but it must be postmarked by the deadline, not just received by it.

Credit Monitoring And What Else Is Included

Separate from the cash payments, every settlement class member automatically received an enrollment code for one year of credit monitoring, which the administrator describes as including real-time credit file monitoring, dark web scanning, public record monitoring, identity restoration services and $1,000,000 of identity theft insurance with no deductible. That benefit doesn’t require filing a claim form — it was issued directly to class members. The cash payments are the part that does require action before the deadline.

Money won’t move immediately even for people who file on time. The court has scheduled a final approval hearing for November 11, 2026, and payments go out only after the settlement is approved and any appeals are resolved, a process the administrator says it cannot predict the length of in advance. That timing gap is normal for class-action settlements of this size, but it means the $75 isn’t a same-week deposit — it’s a claim you file now for money that arrives later, once the paperwork behind the paperwork-free payment clears the court.

Key Dates Before The November 6 Deadline

Two earlier deadlines already matter more for anyone who wants to preserve other legal options: October 22, 2026, is the last day, per the settlement’s important dates page, to opt out of the settlement or file a written objection with the court. Staying in the class and filing a claim means giving up the right to sue SitusAMC separately over the breach, so anyone weighing a personal lawsuit over documented losses should think about that date first, not the claim deadline.

For everyone else, the practical steps are simple: find the notice you were mailed or emailed, have any Class Member information from it on hand, and file online or by mail before November 6, 2026. According to the settlement administrator’s own FAQ, doing nothing means forfeiting the cash benefit entirely while still giving up your right to sue over the incident — which is the one outcome worth avoiding either way.

This article was produced with AI assistance and reviewed by a human editor. Figures are linked to their primary sources; where a claim could not be verified from the public record, we say so.

More Financial Reading


Spotted an error? Tell us at [email protected]. We fix mistakes fast and in the open — see how we work on our standards page.

Get the money news that affects your wallet — free, every weekday morning.

Benefits, taxes, and savings, explained in plain English. Get the free newsletter.

Free from Retirement Shield. Unsubscribe anytime. We never ask for money.