Cyberattack Exposes Sensitive Data of Hundreds of Thousands

Marquis, a technology firm utilized by numerous banks to analyze and visualize customer data, has revealed that a ransomware attack last year compromised the personal and financial information of hundreds of thousands of individuals.

Notification of Breached Data Set to Affect Over 672,000 Individuals

The Plano, Texas-based fintech company is notifying at least 672,075 individuals that their information was stolen during a cyberattack in August 2025, as confirmed by a recent report from Maine’s attorney general’s office.

Significant Impact on Texas Residents

Data from a separate breach notice indicates that more than half of those affected reside in Texas, highlighting the regional impact of this serious security incident.

Details of the Data Breach Unearthed

This disclosure offers the most comprehensive understanding to date of the breach’s scope, which had not been previously reported. The attack enabled hackers to access sensitive banking information, including customers’ names, birthdates, and postal addresses. Additionally, the hackers obtained financial details such as bank account numbers, debit and credit card information, and Social Security numbers.

Legal Action Against Firewall Provider for Security Breach

In connection with the cyberattack, Marquis filed a lawsuit against its firewall provider, SonicWall, in February. The fintech company alleges that SonicWall’s security shortcomings played a critical role in the breach, allowing hackers to access essential information about Marquis’ firewalls, which facilitated unauthorized access to its network.

Allegations of Vulnerabilities in Firewall Security

The lawsuit claims that SonicWall created a security vulnerability that enabled the theft of firewall configuration backup files, including those belonging to Marquis itself. This breach underscores the interconnected risks associated with cybersecurity in the fintech sector.

Marquis Remains Silent on Further Inquiries

As of now, Marquis has not provided any immediate comment in response to inquiries from TechCrunch regarding the ongoing situation.