Fintech firm Marquis alerts dozens of US banks and credit unions of a data breach after ransomware attack | TechCrunch

"Fintech company Marquis is notifying dozens of U.S. banks and credit unions that they had customer data stolen in a cyberattack earlier this year. Details of the cyberattack emerged this week after Marquis filed data breach notices with several U.S. states confirming its August 14 incident as a ransomware attack. Texas-based Marquis is a marketing and compliance provider that allows banks and other financial institutions to collect and visualize all of their customer data in one place."

"Marquis said the hackers stole customer names, dates of birth, postal addresses, and financial information, such as bank account, debit, and credit card numbers. Marquis said the hackers also stole customers' Social Security numbers. According to its most recent notices, Marquis blamed the ransomware attack on hackers who exploited a vulnerability in its SonicWall firewall. The vulnerability was considered a zero-day, meaning the flaw was not known to SonicWall or its customers before it was maliciously exploited by hackers."

Marquis, a Texas-based marketing and compliance provider serving over 700 banks and credit unions, experienced a ransomware attack on August 14. The attackers accessed and stole customer names, dates of birth, postal addresses, bank account, debit and credit card numbers, and Social Security numbers. At least 400,000 individuals are confirmed affected so far, with Texas accounting for at least 354,000 affected residents and Maine State Credit Union customers representing a large share of Maine notifications. Marquis blamed exploitation of a SonicWall firewall zero-day vulnerability. The number of affected individuals is expected to increase as more notifications are filed.

Read at TechCrunch