Marquis Software Solutions Data Breach: SSNs & Names Exposed

On Aug. 14, 2025, Marquis Software Solutions, a technology vendor serving hundreds of banks and credit unions, discovered suspicious activity on its network. On Oct. 27, 2025, Marquis notified Community 1st Credit Union that it had a experienced a cybersecurity incident that exposed sensitive information of member accounts dating prior to 2020.

According to the notice, Marquis became aware of the security breach on Aug. 14, 2025, and shortly thereafter paid a ransomware bounty. However, sensitive data was still exposed to the black market, which may have a significant effect on those impacted.

The types of information exposed include personally identifiable information (PII) such as name, date of birth, account number, and Social Security or Tax ID number. The Iowa Attorney General was notified of the ransomware attack on Nov. 7, 2025. The breach affected 6,511 Iowa residents and a total of 6,876 members.

The exposure of PII puts individuals at risk of identity theft and financial fraud.

Marquis’ response

After detecting the breach, Marquis immediately launched an investigation and engaged cybersecurity experts to assess the situation. The company also notified law enforcement and began working with affected financial institutions to identify impacted individuals. Marquis has since taken steps to strengthen its security measures and reduce the risk of similar incidents in the future.

In response to the ransomware attack and subsequent security breach, Marquis is providing a complimentary membership to Epiq Privacy Solutions ID, which includes credit monitoring, dark web monitoring, credit protection, change of address monitoring, and identity restoration services.

If you receive a data breach notice from Marquis or your banking institution, you may want to:

• Sign up for the free credit monitoring and identity theft protection services, offered by the company.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.