MARQUIS , a Texas-based provider of marketing and compliance solutions for credit unions and banks, disclosed that a data breach revealed last year affects roughly 672,000 individuals. The company said it discovered in August 2025 that hackers gained access to its systems, and a December notification stated that personal information such as names, addresses, SSNs, dates of birth, taxpayer identification numbers and financial data, including payment card numbers, had been stolen.
Earlier estimates had suggested as many as 780,000 people could be affected, while Comparitech later speculated that as many as 1.6 million might be impacted. Marquis told the Maine Attorney General’s Office this week that just over 672,000 are affected. No cybercrime group has taken credit for the attack, though one removed data breach notice from an Iowa credit union suggested Marquis paid a ransom, a claim the company has not confirmed.
The breach was linked to an exploited SonicWall firewall vulnerability, with the Akira ransomware group noted as having ramped up exploitation of SonicWall flaws around the same time.