The Industrial Credit Union of Whatcom County, a downstream customer of Marquis Software Solutions, was impacted by a data breach that originated at Marquis. The breach occurred on August 14, 2025, and Marquis confirmed the incident on October 27, 2025, after paying a ransomware demand.
Personal data including names, Social Security Numbers, dates of birth, addresses, government IDs, medical information, and financial information were exposed. Nationwide, 1,318,195 individuals were confirmed affected by December 2025, with an additional 672,075 individuals reported by the Maine Attorney General by March 2026, totaling over 1.9 million affected individuals. In Washington state alone, 269,773 individuals were affected. The breach exposed highly sensitive information, triggering strict notification requirements.
More details may emerge as state attorney general offices continue their oversight. Official disclosures are available on various state AG websites.