Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Interior Federal Credit Union data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Interior Federal Credit Union
Interior Federal Credit Union is a member-owned financial institution that primarily serves individuals connected to the U.S. Department of the Interior, as well as select partner organizations. Founded in 1935, it operates as a not-for-profit credit union, focusing on providing value to its members through competitive rates and lower fees.
The credit union offers a variety of banking services, including savings and checking accounts, loans, credit cards and access to a large shared branch and ATM network. Membership is generally open to employees, volunteers and family members of the Department of the Interior, along with certain other groups.
What Happened?
On Aug. 14, 2025, Marquis Software Solutions, a vendor providing digital and physical marketing services to Interior Federal Credit Union and other institutions, detected suspicious activity on its network. Marquis determined it was the victim of a ransomware attack after an unauthorized third party accessed its network through a SonicWall firewall. The breach was limited to Marquis’ systems; Interior Federal’s internal systems were not directly impacted.
Source: https://www.claimdepot.com/investigations/interior-federal-credit-union-data-breach-2025
Interior Federal cybersecurity rating report: https://www.rankiteo.com/company/interior-federal
"id": "INT1764951006",
"linkid": "interior-federal",
"type": "Ransomware",
"date": "8/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': None,
'industry': 'Banking/Financial Services',
'location': 'United States',
'name': 'Interior Federal Credit Union',
'size': None,
'type': 'Financial Institution (Credit '
'Union)'},
{'customers_affected': None,
'industry': 'Technology/Software',
'location': None,
'name': 'Marquis Software Solutions',
'size': None,
'type': 'Vendor (Digital and Physical '
'Marketing Services)'}],
'attack_vector': 'Ransomware',
'data_breach': {'data_encryption': None,
'data_exfiltration': None,
'file_types_exposed': None,
'number_of_records_exposed': None,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally '
'identifiable '
'information'},
'date_detected': '2025-08-14',
'description': 'Shamis & Gentile P.A. is investigating a data '
'breach involving Interior Federal Credit Union, '
'where sensitive personally identifiable '
'information may have been exposed due to a '
'ransomware attack on Marquis Software Solutions, '
'a vendor providing digital and physical '
'marketing services.',
'impact': {'brand_reputation_impact': None,
'conversion_rate_impact': None,
'customer_complaints': None,
'data_compromised': 'Sensitive personally '
'identifiable information',
'downtime': None,
'financial_loss': None,
'identity_theft_risk': 'High',
'legal_liabilities': None,
'operational_impact': None,
'payment_information_risk': None,
'revenue_loss': None,
'systems_affected': "Marquis Software Solutions' "
'network'},
'initial_access_broker': {'backdoors_established': None,
'data_sold_on_dark_web': None,
'entry_point': 'SonicWall firewall',
'high_value_targets': None,
'reconnaissance_period': None},
'investigation_status': 'Ongoing',
'post_incident_analysis': {'corrective_actions': None,
'root_causes': None},
'ransomware': {'data_encryption': None,
'data_exfiltration': None,
'ransom_demanded': None,
'ransom_paid': None,
'ransomware_strain': None},
'references': [{'date_accessed': None,
'source': 'Shamis & Gentile P.A.',
'url': None}],
'regulatory_compliance': {'fines_imposed': None,
'legal_actions': 'Potential class '
'action investigation',
'regulations_violated': None,
'regulatory_notifications': None},
'response': {'adaptive_behavioral_waf': None,
'communication_strategy': None,
'containment_measures': None,
'enhanced_monitoring': None,
'incident_response_plan_activated': None,
'law_enforcement_notified': None,
'network_segmentation': None,
'on_demand_scrubbing_services': None,
'recovery_measures': None,
'remediation_measures': None,
'third_party_assistance': None},
'title': 'Interior Federal Credit Union Data Breach '
'Investigation',
'type': 'Data Breach',
'vulnerability_exploited': 'SonicWall firewall'}