Particle.news
Download on the App Store

Marquis Ransomware Breach Hits Dozens of Banks, With Reports Putting Toll Above 780,000

New state notices tie the intrusion to a SonicWall zero‑day, spotlighting third‑party risk for community lenders.

Overview

  • Marquis says a ransomware attack on August 14 breached its network through a SonicWall firewall vulnerability described in filings as a zero‑day.
  • State disclosures confirm at least 400,000 people affected so far, with Texas comprising the largest share, while Security Affairs now reports the total exceeds 780,000.
  • Exfiltrated data includes names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, and bank, debit, or credit account details.
  • Notifications identify 74 affected banks and credit unions nationwide, reflecting Marquis’ role serving more than 700 financial institutions.
  • Marquis reports no evidence that the data has been misused or published, customer notices detail new firewall, MFA, logging, and geo‑IP controls, and a deleted filing claimed a ransom was paid, which remains unconfirmed.