Ransomware Attack Impacts Two U.S. Banks

Two U.S. banks have warned customers they were impacted by an August ransomware attack on marquis Software,a financial software company.

Artisans’ Bank and VeraBank informed regulators in Maine last week that recent data breaches originated from the cyberattack on Marquis Software. The company previously disclosed a ransomware incident around August 14, affecting dozens of corporate customers and thousands of downstream users.

VeraBank explained in letters to victims that Marquis Software serves as their “customer communication and data analysis vendor.”

“They had access to your data to communicate relevant and necessary updates and to analyze potential bank products and services,” the Texas-based bank said. “We only provided Marquis with access to your data after they contractually agreed to secure and protect it.”

A total of 37,318 people had information stolen, though the letters do not specify what information was compromised.

Artisans’ Bank, based in Delaware, reported being notified of the incident by Marquis Software in October and discovering that the names and Social Security numbers of 32,344 people were leaked.

Both banks emphasized that hackers did not breach their own systems, and only stole information “maintained by Marquis Software.”

VeraBank and Artisans’ Bank are the latest financial institutions affected as downstream victims of the attack on Marquis Software, which provides data analytics, compliance solutions, and digital marketing tools to numerous credit unions and banks across the U.S.

In its own notices, Marquis software acknowledged the incident.