logo

Marquis sues SonicWall over backup breach that led to ransomware attack

ID: ce19b5f9-b8d0-5241-9c59-88983e4f5011

STIX ID: report--ce19b5f9-b8d0-5241-9c59-88983e4f5011

Feed Name: Bleeping Computer

Threat Score
90/100

Date Published: 2026-02-25

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

**Executive summary:** Attackers leveraged a SonicWall MySonicWall cloud backup API change to access encrypted firewall configuration backups (including credentials and MFA scratch codes), which enabled compromise of Marquis Software Solutions and a subsequent ransomware attack that disrupted operations at 74 U.S. banks and exposed sensitive PII; investigators attribute the intrusion to state-sponsored actors and Marquis has sued SonicWall for negligence.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.