Marquis Data Breach Exposes Dozens of U.S. Banks and Credit Unions
## Cybersecurity Incident at Marquis Software Solutions
Cybersecurity Incident at Marquis Software Solutions
On Tue, Nov 26, 2025, Marquis Software Solutions announced a significant cybersecurity incident involving a ransomware attack that affected multiple U.S. financial institutions.
The breach, initially discovered on Thu, Aug 14, 2025, compromised personal information across numerous banks and credit unions in the United States. Marquis Software Solutions, a marketing and communications vendor based in Plano, Texas, experienced an unauthorized system breach by a third party.
Upon discovering the breach, the company initiated an investigation and engaged cybersecurity experts to assess the incident's scope. Federal law enforcement was also notified. The investigation revealed that specific files containing sensitive personal information were potentially accessed and acquired. The breach was confined to Marquis's environment, and no internal systems of the affected financial institutions were compromised.
Names Addresses Phone numbers Social Security numbers Taxpayer identification numbers Financial account information (without security codes) Dates of birth
According to notification documents, the breach affected at least 42,784 Maine residents and numerous financial institutions, including Community 1st Credit Union and Time Bank.
On Tue, Nov 26, 2025, Marquis Software Solutions announced a significant cybersecurity incident involving a ransomware attack that affected multiple U.S.
Marquis reported no evidence of misuse of the compromised information but is treating the matter seriously due to the data's sensitivity. The company has taken immediate containment measures to secure its network and prevent further unauthorized access. Additional security technologies and processes have been implemented to enhance security.
Marquis is offering complimentary credit monitoring and identity theft protection services through Epiq Privacy Solutions ID for 12 to 24 months. This includes credit monitoring with alerts, dark web monitoring, credit protection services, and identity restoration assistance.
Notifications to affected customers began on Tue, Nov 26, 2025, and will continue in subsequent weeks. Individuals are encouraged to review their account statements and credit reports for unauthorized activity and take advantage of the complimentary services.
A dedicated response line is available at 855-403-1764, operating from 9 a.m. to 9 p.m. Eastern Time, Monday through Friday, for questions or concerns.
This incident highlights the vulnerability of third-party service providers in the financial sector and the need for robust cybersecurity measures across organizations handling sensitive data.
Based on reporting by GBHackers.
