Marquis Blames SonicWall Breach for Ransomware Attack and Data Theft

02.02.2026

Fintech company Marquis is holding its firewall provider, SonicWall, responsible for a data breach that compromised sensitive customer information. In a memo distributed to its clients, Marquis announced plans to seek compensation from SonicWall, alleging that the firewall provider's previous security breach led to the exposure of critical security credentials.

According to Marquis, a ransomware attack in August 2025 was facilitated by the earlier SonicWall security breach, which allowed attackers to acquire essential credentials to infiltrate Marquis' systems. The fintech firm confirmed that a third-party investigation revealed hackers accessed its firewall configuration during the SonicWall breach, using this information to bypass security measures.

Marquis highlighted that it stored a backup of its firewall configuration file within SonicWall's cloud, and is currently evaluating options, including potential recoupment of expenses incurred due to the incident.

When approached for comment, Hanna Grimm, a spokesperson for Marquis, reiterated the connection between the breach and the prior theft of firewall configurations. SonicWall later clarified that its cloud backup breach affected all customers using the service, not just a limited percentage as initially reported.

SonicWall spokesperson Bret Fitzgerald stated that the company has requested evidence from Marquis to validate its claims and confirmed ongoing communication with Marquis regarding the matter.

Marquis, which provides data visualization services to numerous banks and credit unions, began notifying affected individuals last month. The breach exposed personal and financial data, including Social Security numbers, belonging to consumer banking customers across the U.S.

For more details, visit the following sources: TechCrunch Article, SonicWall Notice, The Register Article.