Marquis Lawsuit Alleges SonicWall Firewall Backup Breach Enabled Ransomware Intrusion

Fintech firm Marquis filed a lawsuit in the U.S. District Court for the Eastern District of Texas seeking a jury trial, alleging that security failures in SonicWall’s firewall cloud backup service enabled threat actors to later compromise Marquis and deploy ransomware. The complaint claims a 2025 breach at SonicWall exposed sensitive customer firewall configuration backup files, giving attackers detailed insight into how Marquis and other customers configured their perimeter defenses and providing a “blueprint” to bypass them.

Marquis alleges the stolen backup data included emergency administrative access credentials ("scratch codes"), which were used to gain access to Marquis’ internal network, disrupt operations with ransomware, and exfiltrate sensitive data. Marquis stated the incident caused significant operational, reputational, and financial harm, and reported that attackers accessed personally identifiable information tied to customers of some of Marquis’ financial-institution clients, including data elements such as names, dates of birth, postal addresses, and financial information.