J.P. Morgan Chase. AFP Yonhap News

There are concerns that sensitive customer information may have been leaked following a hacking incident affecting a vendor for major U.S. banks.

According to The New York Times (NYT) on the 22nd (local time), Cybersource AMC, a technology provider for mortgage lending, was subjected to a cyberattack on the 12th.

Cybersource AMC, which does business with hundreds of banks and lending institutions, holds vast and sensitive personal information of its lending customers, including social security numbers.

Cybersource AMC stated that their assessment over two weeks suggests that mortgage-related information has been leaked.

Banks reportedly notified of the potential customer data breach include J.P. Morgan Chase, Citibank, and Morgan Stanley.

A spokesperson for J.P. Morgan Chase stated that the bank itself was not directly hacked.

In response to the incident, FBI Director Cathy Neuman said, "We are working closely with the affected institutions to understand the situation," adding, "We have determined that bank service operations are not disrupted."

Wall Street is concerned that the scale of damage from this hacking incident may be larger than anticipated.

John Winiak, CEO of Clark Street Capital, a consultancy for lending institutions, commented, "If you are one of the top 20 banks handling commercial real estate or residential loans, you are almost certainly doing business with Cybersource AMC."

Jason E. Kuwayama, an attorney specializing in banking regulatory issues, pointed out that Cybersource AMC may also possess information regarding banks' internal operations, stating, "This cannot be viewed solely as a bank customer data breach incident."

Yonhap News