"The Texas-based company discovered in August 2025 that hackers had gained access to its systems. In a notification made public in December, it reported that the attackers had stolen personal information such as names, addresses, SSNs, dates of birth, taxpayer identification numbers, and financial information, including payment card numbers. The information was stored by Marquis on behalf of dozens of the 700 banks and credit unions it serves."
"If 672,000 is the actual number of impacted individuals, some of the numbers shared by banks and credit unions may include overlapping customers who hold accounts at multiple institutions."
"Marquis previously said the attack exploited a SonicWall firewall vulnerability. Around the time the company discovered the attack, the Akira ransomware group had ramped up its exploitation of SonicWall firewall flaws."
Marquis, a Texas-based provider of marketing and compliance solutions serving 700 banks and credit unions, discovered a data breach in August 2025 when hackers accessed its systems. The attackers stole personal information including names, addresses, Social Security numbers, dates of birth, taxpayer identification numbers, and payment card data. Initial disclosures did not specify the total number of affected individuals, leading to varying estimates ranging from 780,000 to 1.6 million people. Marquis recently informed the Maine Attorney General's Office that 672,000 individuals are affected, with overlapping customers at multiple institutions potentially accounting for discrepancies in earlier estimates. The breach exploited a SonicWall firewall vulnerability, and evidence suggests a ransom may have been paid, though Marquis has not confirmed this claim.
#data-breach #financial-services-security #ransomware #sonicwall-vulnerability #personal-information-theft
Read at SecurityWeek
Unable to calculate read time
Collection
[
|
...
]