Home / Technology / Fintech Hack Exposes 672,000 Customers' Data
Fintech Hack Exposes 672,000 Customers' Data
1 Apr
Summary
- A Texas-based fintech company, Marquis, was targeted in a ransomware attack.
- Over 672,000 individuals had sensitive personal and financial data stolen.
- The breach may have been facilitated by a flaw in a firewall provider's system.
A major data breach has compromised the sensitive information of at least 672,075 individuals following a ransomware attack on Marquis, a Texas-based fintech company. The incident, which occurred in August 2025, led to the theft of names, dates of birth, home addresses, bank account details, debit and credit card numbers, and Social Security numbers.
Marquis, which provides data analytics tools to hundreds of banks, is pursuing legal action against its firewall provider, SonicWall. The lawsuit alleges that a security flaw in SonicWall's cloud backup service allowed attackers to steal critical configuration files and credentials, effectively providing a roadmap into Marquis' network.
This breach highlights the vulnerability of data held by third-party service providers. Experts warn that exposed firewall configuration files can enable attackers to map networks and bypass security measures. The stolen data poses a significant risk for identity theft and financial fraud, as criminals can use it to open loans or impersonate individuals.
Customers whose data may have been compromised are advised to monitor transactions, place fraud alerts or credit freezes, and enable two-factor authentication on their accounts. They should also be wary of phishing attempts that may use stolen information to appear legitimate. The situation underscores the critical need for robust cybersecurity practices among all entities handling sensitive financial data.
