Technology
Banking tech data breach exposes 672K in ransomware attack
NEWYou can now listen to Fox News articles!
If you’ve ever trusted your bank to keep your financial data safe, this incident will hit close to home.
A behind-the-scenes tech company used by banks has revealed that more than 672,000 people had sensitive personal and financial information stolen in a ransomware attack. That includes details that criminals can use to drain accounts, open loans, or impersonate you.
What makes this more concerning is that the company is not a household name, so you likely never knew your data was even there.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
HOW TO SAFELY VIEW YOUR BANK AND RETIREMENT ACCOUNTS ONLINE
More than 672,000 people had personal and financial data exposed after a ransomware attack hit Marquis, a little-known tech company used by banks. (ArtMarie/Getty Images)
All about the Marquis data breach
Marquis, a fintech company based in Texas, provides data analytics tools to hundreds of banks. Banks rely on Marquis to study customer behavior and improve services, which means Marquis has access to highly sensitive financial and personal data.
In August 2025, hackers reportedly gained access to Marquis’ systems and carried out a ransomware attack. The company now says at least 672,075 people were affected. More than half of them are in Texas, but customers across multiple regions are involved.
The stolen data reportedly includes names, dates of birth, home addresses, bank account details, debit and credit card numbers, and even Social Security numbers. That combination is enough to commit serious identity fraud.
Marquis later filed a lawsuit against its firewall provider, SonicWall, claiming that a security flaw may have allowed attackers to steal critical configuration files. According to the lawsuit, those files gave hackers a roadmap into Marquis’ network, which they used to steal data and deploy ransomware.
What the lawsuit alleges
The lawsuit goes further, alleging that SonicWall failed to properly secure its cloud backup system, which exposed firewall configuration files, encrypted credentials and detailed network architecture tied to customer environments. Marquis claims this level of access effectively gave attackers a blueprint of its defenses. Marquis also alleges that SonicWall knew its cloud backup service had been compromised but did not promptly disclose the full scope of the breach. According to the complaint, the company initially reassured customers that firewall protections were not affected, delaying Marquis’ ability to take protective action. The complaint further alleges gross negligence, arguing that SonicWall failed to uphold basic cybersecurity responsibilities expected of a security provider.
What Marquis says happened
CyberGuy reached out to Marquis for comment, and a spokesperson provided the following statement:
“In August 2025, Marquis Marketing Services identified a data security incident and immediately enacted our incident response protocols, including proactively taking affected systems offline to protect our data and our customers’ information. We engaged leading third-party cybersecurity experts to conduct a comprehensive investigation and notified law enforcement.
In September 2025, after the data security incident affected our systems, our firewall service provider, an industry-leading cybersecurity company, publicly disclosed that a threat actor had earlier in the year gained unauthorized access to its cloud backup service. Marquis had recently begun using this provider’s firewalls to help protect our network. While the provider initially reported that fewer than 5% of customers were affected, it later clarified in October 2025 that firewall configuration data and credentials associated with all customers using the cloud backup service, including Marquis, had been accessed.
We know our customers place great trust in us, and we take that responsibility seriously. Protecting information remains our highest priority, and we continue to enhance our security measures in response to the evolving cyber threat landscape. We are grateful for the cooperation, understanding and support of our employees and customers throughout this process.”
We also reached out to SonicWall for comment, but did not hear back before our deadline.
WHY SCAMMERS OPEN BANK ACCOUNTS IN YOUR NAME
A ransomware attack on Texas-based fintech firm Marquis exposed sensitive data that criminals could use to steal identities, open loans and target bank customers. (FreshSplash/Getty Images)
How the attack unfolded and why it matters to you
This attack did not target you directly. Instead, it hit a company that sits in the middle of the banking system. That is what makes it dangerous. Think of it like this: you lock your house, but someone breaks into the security company that manages keys for your entire neighborhood. Suddenly, they can unlock multiple homes without ever touching your door.
In this case, hackers reportedly gained access to firewall configuration files. These are like blueprints that show how a company’s defenses are set up. With that information, attackers can find weak spots and slip in without setting off alarms.
Security experts warn that when firewall configuration files and credentials are exposed, attackers can more easily map out a network, identify vulnerabilities and bypass protections that would normally stop an intrusion.
Once inside, they copied sensitive data and likely encrypted systems to demand a ransom. Even if the company restores operations, your data is already out there.
Criminals can use your Social Security number and financial details to open credit cards, take loans, or access your bank accounts. They can also combine your data with other leaks to create convincing scams that look legitimate. You might receive calls, emails, or messages that seem to come from your bank but are actually attempts to steal more information.
9 ways you can protect yourself from the Marquis data breach
If your information was exposed, or even if you’re not sure, taking action now can reduce your risk of fraud, identity theft, and unauthorized access to your accounts.
1) Check if your email and passwords are compromised
To see if your email was affected, visit Have I Been Pwned at haveibeenpwned.com. It is the first and official source for this newly added dataset. Enter your email address to find out if your information appears in the Synthient leak. When done, come back here for Step 2.
2) Change your passwords immediately
Start with your most important accounts, such as email, medical and banking. Use strong, unique passwords with letters, numbers, and symbols. Avoid predictable choices like names or birthdays. Never reuse passwords. One stolen password can unlock multiple accounts. A password manager makes this simple. It stores complex passwords securely and helps you create new ones. Many managers also scan for breaches to see if your current passwords have been exposed. See my review of the Best Password Managers of 2026 at Cyberguy.com.
3) Monitor your bank accounts closely
Check your transactions at least once every few days, not just when your monthly statement arrives. Look for small, unfamiliar charges because criminals often test accounts with tiny transactions before attempting larger withdrawals. Catching this early gives you a better chance of stopping further damage.
4) Place a fraud alert or credit freeze
If your Social Security number may be exposed, consider placing a fraud alert or freezing your credit. This makes it harder for criminals to open new accounts in your name. A freeze is a stronger protection because lenders must verify your identity before issuing credit.
WHY A CREDIT FREEZE ISN’T THE END OF IDENTITY THEFT
The Marquis breach shows how sensitive financial data can be exposed through third-party companies most bank customers never know exist. (sshepard/Getty Images)
5) Enable two-factor authentication (2FA)
Enable two-factor authentication (2FA) whenever possible, especially for banking and email accounts. This adds a second step, like a code sent to your phone, which makes it much harder for someone to access your accounts even if they have your password.
6) Check if your data is already circulating online
With breaches like this, your information can end up on the dark web without you knowing. If you find your information is out there, take it seriously and consider removing your data where possible or using a data removal service to limit further exposure. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
7) Watch out for targeted scams
With your personal details exposed in the Marquis data breach, scammers can craft messages that feel legitimate. Be cautious of calls or emails claiming to be from your bank asking for verification or urgent action. Always contact your bank directly using official numbers instead of responding to those messages. Also, avoid clicking links you don’t recognize. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
8) Consider identity theft protection services
These services monitor your personal information across credit reports, dark web marketplaces, and financial systems. They can alert you quickly if your identity is being misused, giving you a chance to act before serious damage occurs. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.
9) Keep your devices updated and secure
Make sure your phone, computer, and apps are up to date with the latest security patches. Install trusted antivirus software to detect malicious activity. While this breach did not happen on your device, attackers often follow up with malware-based scams.
Kurt’s key takeaway
This breach highlights a growing problem you rarely see. Your data does not just live with your bank. It is shared across a network of third-party companies that you have never heard of, yet they hold enough information to expose your entire financial identity. When one of them fails, the consequences fall on you. The legal battle between Marquis and SonicWall also raises a bigger question about accountability. When cybersecurity providers themselves are accused of exposing sensitive infrastructure and delaying disclosure, it shows how quickly trust can break down across the entire system.
Should companies that handle your financial data face automatic penalties when breaches expose hundreds of thousands of people? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
Snap, YouTube, and TikTok have settled the first lawsuit of its kind, alleging that social media addiction has cost public schools massive amounts of money, according to Bloomberg. The suit, filed by the Breathitt County School District in Kentucky, claims that social media has disrupted learning and created a mental health crisis, straining budgets. The terms of the settlement have not been revealed yet, and Meta is still facing a trial in the same suit, which is viewed as a bellwether for over 1,000 similar lawsuits across the country
This follows an earlier case, settled by Snap and TikTok, in which a 19-year-old plaintiff claimed significant personal injury due to addictive social media apps. Google and Meta did not agree to a settlement in that suit, and it eventually went to trial, where a jury awarded the plaintiff $6 million. Meta also recently lost a suit brought by New Mexico’s Attorney General, to the tune of $375 million.
Beyond monetary awards, many, including New Mexico, are pushing for significant changes to social media apps to limit their harm to minors. And this is just the start of what’s shaping up to be a busy year for social media lawsuits. According to Bloomberg, lawyers representing school districts said their “focus remains on pursuing justice for the remaining 1,200 school districts who have filed cases.”
NEWYou can now listen to Fox News articles!
It starts quietly. Your phone buzzes. You see a voicemail notification. But your phone never rang. Then it happens again. And again. Before long, your voicemail inbox looks like it’s under attack.
That’s exactly what Mike from Westport, CT, is dealing with right now. He wrote to us saying,
“I am so upset. Every 20 to 30 minutes, I am getting voicemails, but what’s weird is my phone never rings. After blocking the number, it just rolls over to a new source number. When I go to play the message, there is no audio. Is this a scammer just trying to get me to call them back? Not sure what the endgame is here. What can I do to stop this from happening? I really appreciate your help.”
What he is describing is something we’re seeing more often. It may feel random, but there’s a clear pattern behind this voicemail scam and here’s what you need to know to stay safe.
RECEIVING UNEXPECTED INTERNATIONAL CALLS? WHAT YOU NEED TO KNOW
Silent voicemail scams can flood a phone with blank messages even when the device never rings. (Getty Images)
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
What the silent voicemail scam actually is
This tactic is often called a silent voicemail scam or ringless voicemail spam. Here’s how it works in plain terms:
- Scammers drop voicemail messages directly into your inbox
- Your phone never rings, so it feels strange and urgent
- The message is blank, garbled or extremely short
- The number changes constantly to avoid blocks
At first glance, it looks like a glitch. That confusion is the point.
What’s really happening behind the scenes
This pattern almost always points to automated robocall systems using caller ID spoofing, not real people manually calling you.
Here’s what’s likely happening:
- Automated dialing systems are repeatedly hitting your number
- They use spoofed or constantly changing caller IDs, which is why blocking one number doesn’t stop it
- Some calls connect briefly, then drop, leaving behind a silent or very short voicemail
- In some cases, the system is “pinging” your number to confirm it’s active
Once a number is confirmed as active, it can be shared across spam networks and used in future campaigns.
Why scammers leave empty voicemails
It seems pointless, but there’s a strategy behind it.
1) They want you to call back
Curiosity does the work for them. Many people return the call just to figure out what happened. When you call back, you may:
- Reach a premium-rate number that charges per minute
- Get routed into a scam call center
- Confirm your number is active and monitored
2) They test if your number is real
Even if you never call back, your voicemail confirms your number is in use. That makes it more valuable for future scams.
3) They try to bypass spam filters
Because your phone never rings, traditional call filters may not catch it. That lets more of these messages slip through.
Why do the numbers keep changing
You block one number, and another appears minutes later. That’s usually a sign of caller ID spoofing and number cycling. Scammers use software to falsify the number that shows up on your phone and rotate through large batches of numbers to stay ahead of blocks and spam filters. Some of those numbers may be completely fabricated, while others may belong to real people whose caller ID information is being misused. Many of those numbers are:
- Fake
- Reassigned or temporarily used
- Tied to real people who have no idea their number is being spoofed
Blocking a single number can still be worth doing, but it usually will not stop the campaign by itself because the caller can keep switching numbers.
GOOGLE SEARCH LED TO A COSTLY SCAM CALL
Scammers may use ringless voicemail spam and caller ID spoofing to test whether a phone number is active. (Getty Images)
Is your phone being hacked?
This is one of the first things many people worry about. In most cases, no. These silent voicemails are more likely to be part of a scam call or robocall campaign than a sign that your phone has been hacked. Scammers can use tactics such as caller ID spoofing and ringless voicemail to reach you without making the call feel normal.
The bigger risk isn’t your phone itself. It’s how the scam tries to get you to respond. Calling back, pressing prompts or engaging with the message can confirm that your number is active and may expose you to more scam attempts. The FTC specifically advises people to hang up or delete the voicemail and not call back unknown numbers.
How to stop silent voicemail scams
You don’t have to just put up with it. There are ways to reduce or stop these messages.
1) Do not call back unknown numbers
Even if it feels harmless, skip it. If it’s important, the caller will leave a real message.
2) Enable spam call filtering
On iPhone and Android, turn on built-in call filtering and silence unknown callers. This helps reduce future attempts.
How to enable spam call filtering
On iPhone (latest iOS)
Apple now gives you two strong options: Silence Unknown Callers and Call Screening.
Option 1: Silence unknown callers
- Open Settings
- Tap Apps
- Tap Phone
- Scroll down and turn on Unknown Callers
This sends calls from numbers not in your contacts straight to voicemail without ringing.
Option 2: Turn on Call Screening (recommended)
- Open Settings
- Tap Apps
- Tap Phone
- Scroll down and under Screen Unknown Callers, select Ask Reason for Calling
This feature prompts unknown callers to say who they are before your phone rings, which filters out many spam calls automatically.
Optional: Enable spam identification
- Go to Settings
- Tap Apps
- Tap Phone
- Tap Call Blocking & Identification
- Tap Business Call Identification
- Make sure it is set to ON
This allows your iPhone to show verified business names and logos for legitimate callers when available.
On Samsung
Samsung combines spam protection with AI call screening.
Settings and feature names may vary depending on your Samsung model, carrier and software version.
Option 1: Turn on spam protection
- Open the Phone app
- Tap the three-dot menu (top right)
- Tap Settings
- Tap Caller ID and spam protection
- Toggle it ON
This flags suspected spam calls before you answer.
Option 2: Block unknown callers
- Open the Phone app
- Tap the three-dot menu (top right)
- Tap Settings
- Tap Block numbers
- Turn on Block calls from unknown numbers
This stops hidden or unidentified numbers from ringing your phone.
Option 3: Enable Call Screen (best option)
- Open the Phone app
- Tap the three-dot menu (top right)
- Tap Settings
- Tap Bixby Text Call or just Text Call
- Toggle it ON
This lets your phone answer unknown calls with AI and show you what the caller says in real time.
One important reality check: Even with these turned on, some calls may still go to voicemail. That’s because voicemail is controlled by your carrier, not your phone.
HOW TO STOP SPAM MAIL, POLITICAL TEXTS AND EMAIL SPAM FOR GOOD
Unknown voicemail messages that contain no audio may be part of an automated robocall campaign. (Kurt “CyberGuy” Knutsson)
3) Use a call-blocking app
Apps can spot patterns faster than manual blocking and stop repeat offenders. Many of these apps can also identify known scam numbers and automatically block high-risk calls, helping reduce how often your phone gets hit.
4) Contact your carrier
Many carriers offer network-level spam blocking. Ask about tools that block ringless voicemail or robocalls.
5) Use a data removal service
If your number keeps getting hit, it may already be circulating on marketing lists or data broker sites. These data removal services scan for your personal information and help remove it from databases that scammers often tap into. Cutting down where your number appears can reduce how often you get targeted over time. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
6) Report the activity
You can report unwanted calls and voicemails to the Federal Trade Commission at reportfraud.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357). Reports help track and shut down large scam campaigns.
7) Protect your number going forward
Avoid posting your phone number publicly. The less exposure it has, the harder it is for scammers to target you.
8) Register your phone number on the National Do Not Call Registry at donotcall.gov/
This can help reduce telemarketing calls from legitimate businesses, but it unfortunately won’t stop scammers, illegal robocalls, or exempt organizations (like charities and political groups) from calling you. Scammers often ignore the registry and use tactics like number spoofing to bypass it. Want to know more about why your phone still won’t stop ringing and what you can do about it? Check out our article on the ‘Do Not Call’ list loophole.
Kurt’s key takeaways
Silent voicemails are designed to mess with your instincts. They rely on curiosity and confusion, not sophisticated hacking. The best move is simple. Don’t engage. Let them hit a dead end. Over time, that tells the system your number isn’t worth the effort.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
So here’s the real question: If scammers are counting on curiosity to hook you, how often do you think that instinct is working on other people right now? Let us know by writing to us at Cyberguy.com
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Xbox just allcapsmaxxed: Meet XBOX. This isn’t a joke; Microsoft appears to be actually rebranding Xbox to XBOX. Asha Sharma, Xbox CEO, ran a poll on X earlier this week, asking fans whether Microsoft should use Xbox or XBOX. The results were in favor of XBOX, and the company has now renamed its X account.
Curiously, the Threads and Bluesky accounts for Xbox haven’t been renamed yet, but if Microsoft is going ahead with a rebranding then I expect those will change soon. I asked Microsoft to comment on this potential Xbox rebranding and the company simply referred me to Sharma’s post.
The use of all caps for Xbox is a return to original form, though. Microsoft’s first Xbox logo for its console was all caps, and the company has favored using similar capped versions for the Xbox 360, Xbox One, and Xbox Series X / S console logos.
The apparent rebranding comes just a few weeks after Sharma scrapped Microsoft Gaming and renamed Microsoft’s gaming division back to Xbox. It’s part of Sharma’s continued promise of a “return of Xbox,” which has involved fan-focused console updates, a new Xbox logo, Game Pass pricing changes, and lots more in recent weeks.
-
Ohio2 minutes agoOhio Highway Patrol investigating fatal head-on crash on U.S. Route 62
-
Oklahoma8 minutes agoOklahoma ‘Getting Gritty’ After SEC Tournament Loss
-
Oregon14 minutes agoRecall issued for organic ice cream sold in Oregon over metal concerns
-
Pennsylvania20 minutes agoSen. McCormick tours NSF-funded AI-powered biotech labs at Penn
-
Rhode Island26 minutes agoWhat to expect at Roger Wheeler and Misquamicut beaches this summer
-
South-Carolina32 minutes agoSouth Carolina lands commitment from big transfer portal offensive lineman
-
South Dakota38 minutes agoFact brief: Was an east-west split of Dakota Territory considered?
-
Tennessee44 minutes agoTennessee man arrested after kidnapping his two grandchildren