Marquis Says Data Breach Affected 672,000 Individuals
Summary
Marquis told Maine officials that its 2025 breach affected just over 672,000 people. The company reported that attackers accessed its systems and stole personal and financial information; a reported ransom payment remains unconfirmed.
Key points
- Marquis discovered in August 2025 that attackers had accessed its systems.
- The company reported that stolen information included names, addresses, Social Security numbers, dates of birth, taxpayer identification numbers, and financial data, including payment card numbers.
- Marquis told the Maine Attorney General’s Office that just over 672,000 people were affected.
- Earlier estimates ranged from at least 780,000 to as many as 1.6 million; overlapping customers across financial institutions may account for some differences.
- Marquis previously said the attack exploited a SonicWall firewall vulnerability. The article does not identify a specific flaw or establish a connection to Akira, which was exploiting SonicWall flaws around that time.
- Comparitech reported that a now-removed credit union notice said Marquis paid a ransom, but Marquis had not confirmed the claim.
Article Details
- Victim Organization
- Marquis
- Incident Type
- Data breach involving unauthorized access to Marquis systems and theft of personal and financial information; Marquis said the attack exploited a SonicWall firewall vulnerability.
- Disclosure Date
- 2025-12-01
- Data Types Exposed
- Names
- Addresses
- Social Security numbers
- Dates of birth
- Taxpayer identification numbers
- Financial information, including payment card numbers
- Affected Records
- Just over 672,000 individuals, according to information Marquis provided to the Maine Attorney General’s Office. Earlier estimates ranged from at least 780,000 to as many as 1.6 million.
- Ransom Or Extortion
- Comparitech reported that a now-removed notice from an Iowa credit union said Marquis had paid a ransom. Marquis had not confirmed the claim and did not immediately respond to a request for comment.
- Claim Status
- confirmed