Suncoast Credit Breach Affects 1,634 Individuals: SSNs & Financial Info Exposed

Suncoast Credit Union was affected by a significant data breach after its third-party vendor, Marquis Software Solutions Inc., fell victim to a ransomware attack. The cybersecurity breach exposed personally identifiable information (PII) of Suncoast Credit Union customers in multiple states.

On Aug. 14, 2025, Marquis, a digital and physical marketing and communications vendor, detected suspicious activity on its network and determined that an unauthorized third party had accessed its systems through a vulnerability in its SonicWall firewall.

Following a forensic investigation, Marquis discovered that files containing personal information from several of its business customers, including Suncoast Credit Union, may have been accessed or acquired by the attackers. So far, the data breach has impacted at least 1,017 residents in Washington and 617 in Maine.

The types of information exposed in the Marquis Software Solutions data breach included names, addresses, phone numbers, Social Security numbers, Taxpayer Identification Numbers, financial account information, and dates of birth.

The breach has been disclosed to the Attorney General's offices in Maine and Washington. Notifications to affected individuals began on Nov. 26, 2025, and are ongoing.

Suncoast Credit Union's response

In response to the incident, Suncoast Credit Union and Marquis have taken several steps to support those affected. Marquis promptly launched an investigation, engaged cybersecurity experts, and notified federal law enforcement. The company has since implemented additional security technologies and processes to enhance its network protection.

To help protect affected individuals, Marquis is working with Suncoast Credit Union to provide written notifications and offer complimentary credit monitoring and identity theft protection services through Epiq Privacy Solutions ID.

Given the nature of the breach, affected individuals are advised to remain vigilant by reviewing account statements and monitoring credit reports for any unauthorized activity over the next 12 to 24 months. It is also recommended to take advantage of the complimentary credit monitoring services offered and consider placing a fraud alert or security freeze on credit files as an added precaution.