Yes — Marquis Software Solutions, Inc. (gomarquis.com) was breached. The Plano, Texas financial-marketing / compliance vendor detected a ransomware incident on August 14, 2025. Multi-state AG notice letters describe unauthorized access that may have acquired files holding bank and credit-union customer PII. The Texas Attorney General portal lists 354,289 Texans affected (published December 2, 2025), with data categories including names, addresses, SSNs, DOB, and financial account information.
Notice nuance (verify): Texas OAG records show notice_provided: No for the Marquis row even while counting Texans affected — Marquis has been notifying on behalf of business customers in other states (e.g. Iowa AG letters). Affected consumers should watch for bank/CU letters, not only Marquis-branded mail.
Federal actions are consolidated in the Eastern District of Texas as In Re Marquis Software Solutions, Inc. Data Breach Litigation (4:25-cv-01277, filed November 21, 2025). Marquis also sued SonicWall in E.D. Tex (4:26-cv-00195) over the firewall path press attributed to the intrusion.
What Happened
| Field | Detail |
|---|---|
| Entity | Marquis Software Solutions, Inc. — Plano, TX (gomarquis.com) |
| Sector | Bank / credit-union marketing, compliance, CRM |
| Incident date | August 14, 2025 (ransomware; SonicWall path reported) |
| Texans affected | 354,289 (Texas OAG) |
| Consumer notice | Multi-state AG letters; Texas OAG row shows notice not marked provided — verify with your FI |
| Federal litigation | In Re Marquis 4:25-cv-01277 (E.D. Tex, filed Nov 21, 2025) |
Press tallies (American Banker / BleepingComputer) put national impact above 800,000 consumers across dozens of FIs as notices rolled out.
Independent Cybersecurity Audit
EmailMeNow audit of gomarquis.com on August 5, 2026. 100% is the ideal. (marquissoftware.com scored 29% / Weakest — not the primary brand site.)
| Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|
| gomarquis.com | 61% | 35% | 15% | 87% | Above Average |
Key findings: 61% overall; 35% identity and 15% transport leave spoofed “Marquis / your bank data incident” mail highly plausible during the notice window.
Audit link: gomarquis.com
MFA · website-tech · blacklist · lookalikes
| Check | Result (Aug 5, 2026) |
|---|---|
| Consumer YubiKey / open TOTP | Not documented on public site → Unevaluated |
| Website-tech | Platform undetected; Google Trust Services TLS |
| Blacklist | Clear on checked mail/domain lists |
| Cybersquat | 1 to review: gmarquis.com (omission) |
Priority Actions
If your bank or CU mailed a Marquis-related notice: Enroll only via the letter; freeze credit when SSNs were listed; watch for fake “compliance portal” links.
For FI vendors holding NPPI: Segment marketing databases; patch edge appliances promptly; enforce DMARC + MTA-STS toward 100%.
Related Trackers
- ZenBusiness ShinyHunters litigation
- Parexel Oracle EBS Texas notice
- Financial services AG breaches 2026
- Texas banks MFA scoreboard
- Texas OAG YTD dashboard
- All state AG trackers
Run a free Instant Cybersecurity Audit at audit.emailmenow.com or contact EmailMeNow IT Consulting.
Sources: Texas OAG — Data Security Breach Reports · Iowa AG — Marquis notice letter · CourtListener — In Re Marquis 4:25-cv-01277 · EmailMeNow audit — gomarquis.com