Marquis Software Solutions, a marketing and compliance services vendor to 700+ US financial institutions, was hit by Akira ransomware on August 14, 2025. Threat actors exploited a critical SonicWall firewall vulnerability (CVE-2024-40766) and bypassed MFA. The breach ultimately impacted at least 80 banks and credit unions and approximately 823,548 customers. Exposed data included names, addresses, phone numbers, dates of birth, Social Security numbers, TINs, and financial account information. Reports indicated Marquis paid the ransom. In February 2026, Marquis filed a lawsuit against SonicWall alleging gross negligence. The breach toll later expanded beyond initial estimates.