Marquis says over 672,000 people had personal and financial data stolen in ransomware attack | TechCrunch

Summary

Fintech company Marquis suffered a ransomware attack in August 2025 that compromised personal and financial data of over 672,000 people, including Social Security numbers and banking information. The company has sued its firewall provider SonicWall, claiming security failures in the firewall configuration allowed hackers to infiltrate their network.

Key Points

• Over 672,000 individuals had personal data stolen including names, dates of birth, addresses, Social Security numbers, and banking/credit card information
• Marquis provides data analysis and visualization services to hundreds of banks, amplifying the impact of the breach across the financial sector
• The company filed a lawsuit against SonicWall alleging that vulnerabilities in firewall configuration backup files enabled the attack

Takeaways

• Financial services organizations should audit third-party vendors that handle customer data and ensure robust security controls are in place
• Firewall configuration security is critical - backup files containing network configurations should be properly secured and encrypted to prevent reconnaissance attacks

Topics: ransomware, data breach, financial services, third-party risk, firewall security