Marquis Software Solutions suffered a data breach in August that compromised Social Security numbers, tax ID numbers, account numbers, and dates of birth, according to a notice from Community 1st Credit Union.
The Iowa credit union yesterday confirmed it notified 6,876 people of the breach. In its notice, Community 1st suggests Marquis paid a ransom following an August 2025 ransomware attack. The credit union said the data appears to be from records provided to Marquis prior to 2020.
“On 08/14/25 Community 1st Credit Union (C1st) was notified of a data breach at third party vendor, Marquis. Marquis is a vendor used by C1st for direct and digital marketing. Initially it did not appear any sensitive C1st member information was included in this breach,” says the notice (PDF).
“Marquis paid a ransomware shortly after 08/14/25. On 10/27/25 C1st was notified that nonpublic personal information related to C1st members was included in the Marquis breach.”
No hackers have publicly taken credit for the attack at time of writing. We do not know if other banks were affected, if Marquis paid a ransom, how much was demanded, or how attackers breached Marquis’ network. Comparitech contacted Community 1st Credit Union and Marquis Software Solutions for comment and will update this article if they reply.
Marquis’ clients include more than 700 banks and credit unions.
Marquis is offering eligible victims free identity protection through Epiq.
Ransomware attacks on US tech
In 2025 to date, Comparitech researchers have logged 24 confirmed ransomware attacks on US tech companies, compromising nearly 825,000 records. That’s already more attacks than we recorded in all of 2024, albeit with fewer records impacted.
Other such recently confirmed attacks include:
- Drivestream Inc is notifying victims of a December 2024 data breach claimed by Akira
- GlobalLogic notified more than 10,000 people of a July 2025 data breach claimed by Clop
In the UK, fintech company Checkout.com says it refused to pay a ransom earlier this month and instead donated the ransom money to help fund cybercrime research.
We’re monitoring another 187 unconfirmed attack claims made by ransomware gangs but that haven’t been acknowledged by the targeted tech companies.
About Marquis Software Solutions
Marquis Software Solutions sells marketing and compliance services to more than 700 banks and credit unions across the United States, according to its website. In addition to C1st, they include Banc of California, Inwood National Bank, Needham Bank, Guaranty Bank, Andersen Brother Bank, Nexbank, Erie FCU, and US Eagle FCU. Marquis employs more than 160 people.
