Marquis sues firewall provider SonicWall, alleges security failings with its firewall backup led to ransomware attack

Marquis, a fintech provider, is suing SonicWall after a 2025 SonicWall breach exposed customer firewall backup files — including emergency 'scratch codes' and configuration data — which Marquis says allowed attackers to bypass its firewalls, deploy ransomware, and steal sensitive customer PII (names, DOBs, addresses, bank/debit/credit card numbers, and Social Security numbers). SonicWall initially understated the scope of the breach, later acknowledging all customers’ backups were stolen; Marquis alleges a February 2025 API code change created a vulnerability that enabled unauthenticated access by guessing serial numbers, and at least 400,000 individuals are known to be affected.