Marquis Software Solutions Ransomware Attack Exposes Sensitive Data of University Credit Union Members
On August 14, 2025, Marquis Software Solutions a marketing and communications vendor for University Credit Union (UCU) detected suspicious activity on its systems and launched an investigation with cybersecurity experts. The breach, later confirmed as a ransomware attack, may have exposed sensitive personal and financial data shared with the Iowa Attorney General’s Office, including:
- Names
- Addresses
- Phone numbers
- Social Security numbers
- Taxpayer identification numbers
- Financial account details
- Dates of birth
While UCU’s own systems were not compromised, the vendor’s breach impacted individuals who held accounts, loans, or other financial products with the credit union. Data breach notices were sent to affected parties beginning in late November 2025.
Marquis Software Solutions reported the incident in November 2025, prompting legal action from affected consumers. Attorneys are now organizing mass arbitration a process involving hundreds or thousands of individual claims against the company on behalf of those impacted. Participation requires no upfront cost, with legal fees contingent on a successful outcome.
The breach highlights the risks of third-party vendor vulnerabilities in financial services, particularly for institutions serving university communities, students, and alumni. No details on the ransomware group responsible or the full scope of exposed records have been disclosed.
Source: https://www.classaction.org/data-breach-lawsuits/university-credit-union-november-2025
Marquis cybersecurity rating report: https://www.rankiteo.com/company/marquis-software-solutions
"id": "MAR1790051397",
"linkid": "marquis-software-solutions",
"type": "Ransomware",
"date": "8/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Individuals who held accounts, '
'loans, or other financial '
'products',
'industry': 'Financial Services',
'location': 'Iowa, USA',
'name': 'University Credit Union (UCU)',
'type': 'Credit Union'},
{'industry': 'Marketing and Communications',
'name': 'Marquis Software Solutions',
'type': 'Vendor'}],
'customer_advisories': 'Data breach notices sent to affected parties',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Phone numbers',
'Social Security numbers',
'Taxpayer identification numbers',
'Financial account details',
'Dates of birth']},
'date_detected': '2025-08-14',
'date_publicly_disclosed': '2025-11-01',
'description': 'Marquis Software Solutions, a marketing and communications '
'vendor for University Credit Union (UCU), detected suspicious '
'activity on its systems and launched an investigation with '
'cybersecurity experts. The breach, later confirmed as a '
'ransomware attack, may have exposed sensitive personal and '
'financial data of UCU members. While UCU’s own systems were '
'not compromised, the vendor’s breach impacted individuals who '
'held accounts, loans, or other financial products with the '
'credit union. Data breach notices were sent to affected '
'parties beginning in late November 2025.',
'impact': {'brand_reputation_impact': 'Yes',
'data_compromised': 'Sensitive personal and financial data',
'identity_theft_risk': 'High',
'legal_liabilities': 'Mass arbitration claims',
'payment_information_risk': 'High',
'systems_affected': 'Marquis Software Solutions systems'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Highlights the risks of third-party vendor '
'vulnerabilities in financial services',
'references': [{'source': 'Iowa Attorney General’s Office'}],
'regulatory_compliance': {'legal_actions': 'Mass arbitration claims',
'regulatory_notifications': 'Reported to Iowa '
'Attorney General’s '
'Office'},
'response': {'communication_strategy': 'Data breach notices sent to affected '
'parties',
'incident_response_plan_activated': 'Yes',
'third_party_assistance': 'Cybersecurity experts'},
'title': 'Marquis Software Solutions Ransomware Attack Exposes Sensitive Data '
'of University Credit Union Members',
'type': 'Ransomware'}