Marquis Software Solutions, a technology provider for financial institutions, experienced a data breach stemming from an unauthorized third-party access to its network on August 14, 2025. This incident, caused by a ransomware attack exploiting a zero-day vulnerability in a SonicWall firewall, was confirmed through state Attorney General disclosures and company statements. Marquis completed its review of compromised files on October 27, 2025.
The breach confirmed the exposure of names, addresses, dates of birth, Social Security numbers (SSNs) or taxpayer IDs, financial account numbers, medical information, and government IDs. Some credit and debit card numbers were also compromised. As of December 6, 2025, a confirmed 1,318,195 individuals were affected, with later disclosures suggesting the total could be as high as 1,990,270. The company has not observed signs of identity theft or fraud linked to the incident, but the exposure creates a high risk for follow-up social engineering and phishing attacks. Marquis offers free credit monitoring and identity protection services for 1-2 years to affected individuals.
Details can emerge later, and notices may be delayed.