Marquis Software Solutions, a financial technology provider based in Plano, Texas, has disclosed a significant data breach that compromised sensitive customer information belonging to dozens of banks and credit unions across the United States.
The breach, which occurred on August 14, 2025, has affected at least 42,784 Maine residents alone, suggesting the total national impact could involve hundreds of thousands of individuals.
Technical Details of the Breach
The incident was classified as an “external system breach (hacking),” according to the official notification filed with Maine’s Attorney General office.
The breach was discovered on the same day it occurred August 14, 2025 indicating that Marquis’s security monitoring systems detected the intrusion in real-time.
However, affected customers were not notified until November 26, 2025, more than three months after the breach discovery.
The compromised data includes names combined with other personal identifiers, though the specific types of additional information accessed were not fully detailed in the initial notification.
Given Marquis’s role as a software solutions provider for financial institutions, the breach likely exposed highly sensitive banking and financial data.
Marquis Software Solutions operates as a third-party service provider for numerous financial institutions, acting “on behalf of business customer data owners.”
This business-to-business model means the breach’s impact extends across multiple banks and credit unions that rely on Marquis’s technology infrastructure.
Each affected financial institution is considered a separate data owner, making this a cascading breach affecting numerous organizations simultaneously.
The company is represented by attorney Steven Wernikoff, Partner at Honigman LLP, who submitted the breach notification on behalf of Marquis and its affected business customers.
In response to the breach, Marquis has offered affected individuals comprehensive identity theft protection services for 12-24 months through Epiq Privacy Solution 1D.
The protection package includes credit monitoring with real-time alerts, dark web monitoring to detect if personal information appears on illicit websites, credit protection measures, and full identity restoration services if fraud occurs.
Consumer reporting agencies were notified given that the number of Maine residents exceeded 1,000, as required by law.
The company has not disclosed whether this is the first breach incident within the past 12 months.
Find this Story Interesting! Follow us on Google News, LinkedIn and X to Get More Instant Updates
%20(1).webp?fit=1600,900&ssl=1&description=The incident was classified as an "external system breach (hacking)," according to the official notification filed with Maine's Attorney General office.){kind=link}