Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Industrial Credit Union of Whatcom County (Go Marquis) data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Industrial Credit Union of Whatcom County
Industrial Credit Union of Whatcom County is a financial institution based in Bellingham, Washington. Established in 1941, the credit union was originally created to serve employees of the Puget Sound Pulp and Timber Company in Whatcom County. Over the years, it has expanded its services to the broader community.
The credit union operates as a 501(c)(14) nonprofit organization and is recognized as a Community Development Financial Institution (CDFI), making it a key player in providing financial services to local residents.
What Happened?
In November 2025, Industrial Credit Union of Whatcom County disclosed a significant data breach involving one of its communication delivery partners, Go Marquis. This third-party vendor, which provides print and email communication services to numerous financial institutions, experienced unauthorized access to its systems. As a result, sensitive member information was compromised.
According to the notice submitted to the Washington Attorney General’s office on Nov. 26, 2025, the breach impacted 24,526 individuals in Washington.
Possible I
Source: https://www.claimdepot.com/investigations/industrial-credit-union-data-breach-2025
Industrial Credit Union cybersecurity rating report: https://www.rankiteo.com/company/industrial-credit-union
"id": "IND1764878221",
"linkid": "industrial-credit-union",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'incident': {'affected_entities': [{'customers_affected': '24,526 individuals '
'in Washington',
'industry': 'Banking/Financial Services',
'location': 'Bellingham, Washington, USA',
'name': 'Industrial Credit Union of '
'Whatcom County',
'size': None,
'type': 'Financial Institution (Credit '
'Union)'},
{'customers_affected': None,
'industry': 'Print and Email '
'Communication Services',
'location': None,
'name': 'Go Marquis',
'size': None,
'type': 'Third-Party Vendor'}],
'attack_vector': 'Third-Party Vendor Compromise',
'customer_advisories': 'Affected individuals may be eligible for '
'compensation',
'data_breach': {'data_encryption': None,
'data_exfiltration': None,
'file_types_exposed': None,
'number_of_records_exposed': '24,526',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally '
'Identifiable '
'Information (PII)'},
'date_publicly_disclosed': '2025-11-26',
'description': 'Industrial Credit Union of Whatcom County '
'disclosed a significant data breach involving '
'its third-party communication delivery partner, '
"Go Marquis. Unauthorized access to Go Marquis's "
'systems led to the compromise of sensitive '
'member information.',
'impact': {'brand_reputation_impact': None,
'conversion_rate_impact': None,
'customer_complaints': None,
'data_compromised': 'Sensitive personally '
'identifiable information',
'downtime': None,
'financial_loss': None,
'identity_theft_risk': 'High',
'legal_liabilities': None,
'operational_impact': None,
'payment_information_risk': None,
'revenue_loss': None,
'systems_affected': 'Go Marquis (third-party vendor '
'systems)'},
'initial_access_broker': {'backdoors_established': None,
'data_sold_on_dark_web': None,
'entry_point': None,
'high_value_targets': None,
'reconnaissance_period': None},
'investigation_status': 'Ongoing (Investigated by Shamis & '
'Gentile P.A.)',
'post_incident_analysis': {'corrective_actions': None,
'root_causes': None},
'ransomware': {'data_encryption': None,
'data_exfiltration': None,
'ransom_demanded': None,
'ransom_paid': None,
'ransomware_strain': None},
'references': [{'date_accessed': None,
'source': 'Washington Attorney General’s office',
'url': None}],
'regulatory_compliance': {'fines_imposed': None,
'legal_actions': 'Potential class '
'action investigation '
'by Shamis & Gentile '
'P.A.',
'regulations_violated': None,
'regulatory_notifications': 'Washington '
'Attorney '
'General’s '
'office'},
'response': {'adaptive_behavioral_waf': None,
'communication_strategy': 'Notice submitted to '
'Washington Attorney '
'General’s office',
'containment_measures': None,
'enhanced_monitoring': None,
'incident_response_plan_activated': None,
'law_enforcement_notified': None,
'network_segmentation': None,
'on_demand_scrubbing_services': None,
'recovery_measures': None,
'remediation_measures': None,
'third_party_assistance': None},
'title': 'Industrial Credit Union of Whatcom County (Go Marquis) '
'Data Breach',
'type': 'Data Breach'}}