InfoSecBulletin Cybersecurity for mankind
Two new banks reported a data breach that revealed customer information due to a hack of their third-party vendor, Marquis Software Solutions. VeraBank in Texas reported that a data breach affected 37,318 clients, revealing their names and some personal information.
The bank didn’t detail which personal information was stolen, but its breach notification indicates that what was taken differed among clients.
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
The Marquis hack impacted 32,344 customers of Artisans’ Bank in Delaware, exposing their names and Social Security numbers.
Both banks said Marquis informed them that it conducted its own investigation and informed law enforcement of the breach that it said happened on August 14th.
The Artisans’ Bank said it only learned of the breach in late October and “only recently” that its own customer information may have been compromised. VeraBank said that its own systems were not affected and the attack was limited to Marquis’s environment.
In November, Maine’s Norway Savings Bank (NSB) informed clients that their personal details were exposed following a ransomware attack on Marquis, its software provider. The breach affected 51,000 NSB clients.
NSB said the breach exposed its clients’ names, addresses, dates of birth, Social Security numbers, Tax ID numbers, and financial account information.
Cybernews reported at the time that it appeared Marquis paid the attackers a ransom. While not illegal, it carries a number of risks: there is no guarantee that the attackers wouldn’t share the stolen data on the dark web anyway and it also puts the victim in danger of follow-up attacks.
Texas-based Marquis is a digital marketing, compliance solution, and customer relationship manager (CRM) software provider counting over 700 banks in the US as its clients.
Over 74 US banks, credit unions impacted via Marquis data breach
