Marquis Software Breach Exposed Data of 672,075 People, Filings Say
Summary
Regulatory filings say a breach at Marquis Software exposed data belonging to 672,075 people. Investigators found files were copied; broader estimates put the number affected at 788,000 to 1.35 million. A possible ransom payment is unconfirmed.
Key points
- Marquis Software said it discovered the breach on August 14; investigators found hackers copied files from its systems.
- Regulatory filings report 672,075 people had data exposed.
- Exposed information included names, contact details, Social Security and Taxpayer Identification numbers, dates of birth, and financial account information.
- Marquis initially identified at least 74 affected financial institutions; compiled estimates put the number of people affected between about 788,000 and 1.35 million.
- Banks said their own systems were not breached; the stolen information was maintained by Marquis Software.
- A since-deleted notice obtained by Comparitech suggested Marquis may have paid a ransom. The company did not confirm payment, and no ransomware group publicly claimed the attack.
Article Details
- Victim Organization
- Marquis Software
- Incident Type
- Cyberattack and data breach involving copied files from Marquis Software's systems
- Data Types Exposed
- Names
- Addresses
- Phone numbers
- Social Security numbers
- Taxpayer Identification Numbers
- Dates of birth
- Financial account information
- Affected Records
- Regulatory filings report 672,075 people affected. Compiled estimates from state breach registries, law firms, and cybersecurity researchers put the likely total between approximately 788,000 and 1.35 million.
- Operational Impact
- Investigators found that hackers copied files from Marquis Software's systems. No operational disruption is reported. Multiple banks said their own systems were not breached.
- Ransom Or Extortion
- A since-deleted breach notification letter obtained by Comparitech claimed Marquis Software paid a ransom. Marquis did not confirm payment, and no ransomware group publicly claimed responsibility.
- Claim Status
- confirmed