Marquis and 1st MidAmerica Credit Union: Service Provider Breach Impacts 130,000 Customers of 1st MidAmerica Credit Union

1st MidAmerica Credit Union Customers Hit by Vendor Data Breach Affecting 130,000

A data breach at Marquis, a third-party vendor for 1st MidAmerica Credit Union, has exposed sensitive personal information belonging to over 130,000 customers. The credit union confirmed the incident, though details on the exact timeline, scope of compromised data, and the cause of the breach remain limited.

The breach highlights the growing risks of supply chain attacks, where cybercriminals target vendors to gain access to larger organizations’ data. While 1st MidAmerica has not disclosed whether the breach was the result of a cyberattack, human error, or system vulnerability, the incident underscores the need for stricter vendor security oversight in financial services.

No further information on potential misuse of the exposed data or remediation efforts has been released. The breach follows a pattern of recent high-profile incidents involving third-party service providers, raising concerns about the security practices of vendors handling sensitive financial information.

Source: https://www.teiss.co.uk/news/service-provider-breach-impacts-130000-customers-of-1st-midamerica-credit-union-17040

Marquis Inc cybersecurity rating report: https://www.rankiteo.com/company/marquis-inc

1st MidAmerica Credit Union cybersecurity rating report: https://www.rankiteo.com/company/1st-midamerica-credit-union

"id": "MAR1ST1770216570",
"linkid": "marquis-inc, 1st-midamerica-credit-union",
"type": "Breach",
"date": "1/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '130,000',
                        'industry': 'Financial Services',
                        'name': '1st MidAmerica Credit Union',
                        'type': 'Credit Union'},
                       {'name': 'Marquis', 'type': 'Third-Party Vendor'}],
 'attack_vector': 'Supply Chain Attack',
 'data_breach': {'number_of_records_exposed': '130,000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Sensitive personal information'},
 'description': 'A data breach at Marquis, a third-party vendor for 1st '
                'MidAmerica Credit Union, has exposed sensitive personal '
                'information belonging to over 130,000 customers. The breach '
                'highlights the growing risks of supply chain attacks, where '
                'cybercriminals target vendors to gain access to larger '
                'organizations’ data.',
 'impact': {'data_compromised': 'Sensitive personal information',
            'identity_theft_risk': 'High'},
 'lessons_learned': 'The incident underscores the need for stricter vendor '
                    'security oversight in financial services.',
 'title': '1st MidAmerica Credit Union Customers Hit by Vendor Data Breach '
          'Affecting 130,000',
 'type': 'Data Breach'}