Fintech Firm Marquis Alerts Banks of Data Breach

Marquis Data Breach Impacts U.S. Financial Institutions

Marquis, a fintech firm, is currently informing numerous U.S. banks and credit unions about a data security incident. Customer data was compromised earlier in the year due to a cyberattack.

Details of the Cyberattack

The specifics surrounding the attack surfaced this week following Marquis’s submission of data breach notifications to multiple U.S. states. These filings confirm that the incident, occurring on August 14th, was classified as a ransomware attack.

Based in Texas, Marquis functions as a marketing and compliance solutions provider. They enable banks and other financial institutions to consolidate and analyze customer data within a unified platform. The company serves over 700 banking and credit union clients, granting it access to substantial amounts of consumer banking data nationwide.

Scope of the Data Breach

Currently, at least 400,000 individuals have been confirmed as affected by the data breach. This figure is based on legally mandated disclosures reviewed by TechCrunch, filed in Iowa, Maine, Texas, Massachusetts, and New Hampshire.

Texas currently reports the highest number of impacted residents, with at least 354,000 individuals having their data stolen.

According to a notice filed with Maine’s attorney general, customers of Maine State Credit Union comprised a significant portion of the breach notifications. Approximately one in nine affected individuals throughout the state were customers of this credit union.

The total number of individuals impacted is anticipated to increase as additional data breach notifications are received from other states.

Types of Data Compromised

Marquis has stated that the attackers obtained customer names, dates of birth, and postal addresses. Furthermore, financial information, including bank account details, debit card numbers, and credit card numbers, was also stolen.

Critically, customers’ Social Security numbers were also compromised in the breach.

Attack Vector and Attribution

Marquis attributes the ransomware attack to exploitation of a vulnerability within its SonicWall firewall, as detailed in its recent notices.

While the company has not officially identified the responsible group, the Akira ransomware gang is suspected of being behind the widespread attacks targeting SonicWall customers at the time of the incident.

Ongoing Investigation

TechCrunch reached out to Marquis seeking information regarding the total number of affected individuals, any communication with the hackers, and whether a ransom was paid. A response was not received prior to publication.

If you possess further information regarding the Marquis data breach, or work for Marquis or an affected company, we encourage you to reach out securely. Contact this reporter via Signal using the username: zackwhittaker.1337

Note: This article has been updated to clarify that the SonicWall vulnerability was not a zero-day exploit at the time it was utilized.

AWS re:Invent 2025 – Live Coverage

The latest innovations in areas like agentic AI, cloud infrastructure, and security are being unveiled at the annual Amazon Web Services event held in Las Vegas.

Event Highlights

AWS’s flagship event, re:Invent, is currently showcasing significant advancements across a broad spectrum of technologies.

Attendees and online viewers can expect detailed presentations on the future of cloud computing.

Key Focus Areas

Agentic AI: Discover how AI is becoming more autonomous and proactive.
Cloud Infrastructure: Explore the newest developments in scalable and reliable cloud solutions.
Security: Gain insights into the latest strategies for protecting data and applications.

This coverage is presented in collaboration with Amazon Web Services.

This video is a sponsored presentation from AWS. It provides a comprehensive overview of the key announcements and insights from re:Invent 2025.