Marquis Software Solutions marquiss.com Marquis Software Solutions data breach: what happened and what to do
Marquis Software Solutions, a vendor to banks and credit unions, was hit by ransomware on August 14, 2025. Names, addresses, dates of birth, Social Security numbers and financial account details may be exposed. Outlets count 400,000 to 780,000 people. Your bank would notify you.
View all 13,177 breaches- Breach date
- 14 Aug 2025
- Made public
- 14 Aug 2025
- Data exposed
- Names, Physical addresses, Phone numbers, Dates of birth, Social security numbers, Tax identification numbers, Financial account information
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Marquis Software Solutions, a Plano, Texas company, sells analytics, CRM, compliance reporting and marketing tools to banks, credit unions and mortgage lenders. It says ransomware hit its network on August 14, 2025, and that it spotted suspicious activity the same day. Reporting says the attackers came in through a SonicWall firewall.
Because Marquis works for financial institutions, you may never have heard of it. The notices came from the banks instead. Artisans' Bank told regulators it was notifying 32,344 people, and VeraBank said 37,318. Notifications were filed with state attorneys general including Maine, Iowa and Texas.
The total depends on who counts. BleepingComputer, citing state filings, reports more than 400,000 customers across 74 banks and credit unions. Security Affairs reports more than 780,000 people. No source explains the gap, so treat both as estimates that may grow as more institutions file.
The exposed information may include names, addresses, phone numbers, dates of birth, Social Security numbers, tax identification numbers and financial account information. Security and access codes were not included, according to the notices reported.
What that lets criminals do: a Social Security number with a name and date of birth is what identity thieves use to open credit accounts or file false tax returns. Account details make phishing that pretends to be your bank more convincing.
Marquis says it has no evidence of misuse of the information. It is offering free identity theft and credit monitoring through Epiq Privacy Solutions to people who get a notice. Reports conflict on whether a ransom was paid, and Marquis hasn't commented on that.
Sources checked: bleepingcomputer.com, securityaffairs.com, techradar.com
Last verified against the official page:
What to do if you were in it
- 1
Read the notice from your bank or credit union
If you got a letter that names Marquis, it explains what was exposed for you and how to claim the free credit monitoring it offers. Use the contact details on the bank's own website, not those in an email or text.
- 2
Freeze your credit at all three bureaus
A freeze is free and blocks new credit in your name. The FTC explains how to place one with Equifax, Experian and TransUnion. Lift it temporarily when you apply for credit.
- 3
Watch your statements and credit reports
Check bank and card activity for charges you don't recognize. You can get free credit reports from the three bureaus at annualcreditreport.com.
- 4
Report identity theft at IdentityTheft.gov
If someone opens an account in your name, the FTC's IdentityTheft.gov builds a recovery plan and the reports you need.
- 5
Expect bank-themed phishing
Messages that mention your bank or this breach may be scams. Don't click through. Go to the bank's app or the number on your card.
- 6
Check whether your email or phone is in this and other breaches
Run a free scan with Serus to see where your email or phone number has appeared.
Official filings
- California Attorney General , filed 11 Feb 2026
- Washington Attorney General , filed 26 Nov 2025 : 269,773 people
Timeline
-
The breach happened
-
The company made it public
-
Reported to the Washington Attorney General
-
Reported to the California Attorney General
Frequently asked
Was I affected by the Marquis breach?
Only if your bank or credit union used Marquis and it notified you. Notices come from the institution, often by letter. If you didn't get one, you are probably not in the affected group.
What data was exposed in the Marquis breach?
Names, addresses, phone numbers, dates of birth, Social Security numbers, tax identification numbers and financial account information, though not security or access codes.
How many people were affected by the Marquis breach?
BleepingComputer reports more than 400,000, citing state filings. Security Affairs reports more than 780,000. The figures differ and may still change.
Does Marquis offer credit monitoring?
Yes. Marquis is offering affected people free identity theft and credit monitoring through Epiq Privacy Solutions.
Sources
- bleepingcomputer.com/news/security/marquis-data-breach-impacts-over-74-us-banks-credit-unions/
- securityaffairs.com/185320/data-breach/marquis-data-breach-impacted-more-than-780000-individuals.html
- techradar.com/pro/security/over-70-us-banks-and-credit-unions-affected-by-marquis-ransomware-breach-heres-what-we-know
- govinfosecurity.com/more-banks-issue-breach-notifications-over-supplier-breach-a-30421
- identitytheft.gov/databreach
- consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
Something wrong or out of date? Tell us and we'll re-check it.
