Marquis says over 672,000 people had personal and financial data stolen in ransomware attack

Marquis, a fintech firm that provides data analysis and visualization services to numerous banks, has reported a significant breach that has compromised the personal and financial information of over 672,000 individuals. This alarming incident, which occurred during a ransomware attack in August 2025, has prompted the company to notify the affected individuals, as detailed in a filing with the Maine attorney general’s office. The impact of the breach is particularly pronounced in Texas, where more than half of those affected reside. This disclosure sheds light on the extensive reach of the cyberattack, providing the clearest overview yet of its ramifications. Hackers gained access to sensitive data, including names, dates of birth, and addresses, along with crucial financial details such as bank account numbers and credit card information. Additionally, the attackers managed to obtain Social Security numbers, raising significant concerns about identity theft and fraud. In response to the breach, Marquis has initiated legal action against its firewall provider, SonicWall. The company alleges that SonicWall's security shortcomings allowed hackers to exploit vulnerabilities and access critical data, including configuration files for Marquis’ firewalls. This legal challenge underscores the ongoing struggle that many organizations face in safeguarding their networks against sophisticated cyber threats. As the situation unfolds, Marquis has yet to provide further commentary on the matter when approached by TechCrunch, leaving many questions unanswered for those affected by the breach.