Technology
Banking tech data breach exposes 672K in ransomware attack
NEWYou can now listen to Fox News articles!
If you’ve ever trusted your bank to keep your financial data safe, this incident will hit close to home.
A behind-the-scenes tech company used by banks has revealed that more than 672,000 people had sensitive personal and financial information stolen in a ransomware attack. That includes details that criminals can use to drain accounts, open loans, or impersonate you.
What makes this more concerning is that the company is not a household name, so you likely never knew your data was even there.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
HOW TO SAFELY VIEW YOUR BANK AND RETIREMENT ACCOUNTS ONLINE
More than 672,000 people had personal and financial data exposed after a ransomware attack hit Marquis, a little-known tech company used by banks. (ArtMarie/Getty Images)
All about the Marquis data breach
Marquis, a fintech company based in Texas, provides data analytics tools to hundreds of banks. Banks rely on Marquis to study customer behavior and improve services, which means Marquis has access to highly sensitive financial and personal data.
In August 2025, hackers reportedly gained access to Marquis’ systems and carried out a ransomware attack. The company now says at least 672,075 people were affected. More than half of them are in Texas, but customers across multiple regions are involved.
The stolen data reportedly includes names, dates of birth, home addresses, bank account details, debit and credit card numbers, and even Social Security numbers. That combination is enough to commit serious identity fraud.
Marquis later filed a lawsuit against its firewall provider, SonicWall, claiming that a security flaw may have allowed attackers to steal critical configuration files. According to the lawsuit, those files gave hackers a roadmap into Marquis’ network, which they used to steal data and deploy ransomware.
What the lawsuit alleges
The lawsuit goes further, alleging that SonicWall failed to properly secure its cloud backup system, which exposed firewall configuration files, encrypted credentials and detailed network architecture tied to customer environments. Marquis claims this level of access effectively gave attackers a blueprint of its defenses. Marquis also alleges that SonicWall knew its cloud backup service had been compromised but did not promptly disclose the full scope of the breach. According to the complaint, the company initially reassured customers that firewall protections were not affected, delaying Marquis’ ability to take protective action. The complaint further alleges gross negligence, arguing that SonicWall failed to uphold basic cybersecurity responsibilities expected of a security provider.
What Marquis says happened
CyberGuy reached out to Marquis for comment, and a spokesperson provided the following statement:
“In August 2025, Marquis Marketing Services identified a data security incident and immediately enacted our incident response protocols, including proactively taking affected systems offline to protect our data and our customers’ information. We engaged leading third-party cybersecurity experts to conduct a comprehensive investigation and notified law enforcement.
In September 2025, after the data security incident affected our systems, our firewall service provider, an industry-leading cybersecurity company, publicly disclosed that a threat actor had earlier in the year gained unauthorized access to its cloud backup service. Marquis had recently begun using this provider’s firewalls to help protect our network. While the provider initially reported that fewer than 5% of customers were affected, it later clarified in October 2025 that firewall configuration data and credentials associated with all customers using the cloud backup service, including Marquis, had been accessed.
We know our customers place great trust in us, and we take that responsibility seriously. Protecting information remains our highest priority, and we continue to enhance our security measures in response to the evolving cyber threat landscape. We are grateful for the cooperation, understanding and support of our employees and customers throughout this process.”
We also reached out to SonicWall for comment, but did not hear back before our deadline.
WHY SCAMMERS OPEN BANK ACCOUNTS IN YOUR NAME
A ransomware attack on Texas-based fintech firm Marquis exposed sensitive data that criminals could use to steal identities, open loans and target bank customers. (FreshSplash/Getty Images)
How the attack unfolded and why it matters to you
This attack did not target you directly. Instead, it hit a company that sits in the middle of the banking system. That is what makes it dangerous. Think of it like this: you lock your house, but someone breaks into the security company that manages keys for your entire neighborhood. Suddenly, they can unlock multiple homes without ever touching your door.
In this case, hackers reportedly gained access to firewall configuration files. These are like blueprints that show how a company’s defenses are set up. With that information, attackers can find weak spots and slip in without setting off alarms.
Security experts warn that when firewall configuration files and credentials are exposed, attackers can more easily map out a network, identify vulnerabilities and bypass protections that would normally stop an intrusion.
Once inside, they copied sensitive data and likely encrypted systems to demand a ransom. Even if the company restores operations, your data is already out there.
Criminals can use your Social Security number and financial details to open credit cards, take loans, or access your bank accounts. They can also combine your data with other leaks to create convincing scams that look legitimate. You might receive calls, emails, or messages that seem to come from your bank but are actually attempts to steal more information.
9 ways you can protect yourself from the Marquis data breach
If your information was exposed, or even if you’re not sure, taking action now can reduce your risk of fraud, identity theft, and unauthorized access to your accounts.
1) Check if your email and passwords are compromised
To see if your email was affected, visit Have I Been Pwned at haveibeenpwned.com. It is the first and official source for this newly added dataset. Enter your email address to find out if your information appears in the Synthient leak. When done, come back here for Step 2.
2) Change your passwords immediately
Start with your most important accounts, such as email, medical and banking. Use strong, unique passwords with letters, numbers, and symbols. Avoid predictable choices like names or birthdays. Never reuse passwords. One stolen password can unlock multiple accounts. A password manager makes this simple. It stores complex passwords securely and helps you create new ones. Many managers also scan for breaches to see if your current passwords have been exposed. See my review of the Best Password Managers of 2026 at Cyberguy.com.
3) Monitor your bank accounts closely
Check your transactions at least once every few days, not just when your monthly statement arrives. Look for small, unfamiliar charges because criminals often test accounts with tiny transactions before attempting larger withdrawals. Catching this early gives you a better chance of stopping further damage.
4) Place a fraud alert or credit freeze
If your Social Security number may be exposed, consider placing a fraud alert or freezing your credit. This makes it harder for criminals to open new accounts in your name. A freeze is a stronger protection because lenders must verify your identity before issuing credit.
WHY A CREDIT FREEZE ISN’T THE END OF IDENTITY THEFT
The Marquis breach shows how sensitive financial data can be exposed through third-party companies most bank customers never know exist. (sshepard/Getty Images)
5) Enable two-factor authentication (2FA)
Enable two-factor authentication (2FA) whenever possible, especially for banking and email accounts. This adds a second step, like a code sent to your phone, which makes it much harder for someone to access your accounts even if they have your password.
6) Check if your data is already circulating online
With breaches like this, your information can end up on the dark web without you knowing. If you find your information is out there, take it seriously and consider removing your data where possible or using a data removal service to limit further exposure. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
7) Watch out for targeted scams
With your personal details exposed in the Marquis data breach, scammers can craft messages that feel legitimate. Be cautious of calls or emails claiming to be from your bank asking for verification or urgent action. Always contact your bank directly using official numbers instead of responding to those messages. Also, avoid clicking links you don’t recognize. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
8) Consider identity theft protection services
These services monitor your personal information across credit reports, dark web marketplaces, and financial systems. They can alert you quickly if your identity is being misused, giving you a chance to act before serious damage occurs. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.
9) Keep your devices updated and secure
Make sure your phone, computer, and apps are up to date with the latest security patches. Install trusted antivirus software to detect malicious activity. While this breach did not happen on your device, attackers often follow up with malware-based scams.
Kurt’s key takeaway
This breach highlights a growing problem you rarely see. Your data does not just live with your bank. It is shared across a network of third-party companies that you have never heard of, yet they hold enough information to expose your entire financial identity. When one of them fails, the consequences fall on you. The legal battle between Marquis and SonicWall also raises a bigger question about accountability. When cybersecurity providers themselves are accused of exposing sensitive infrastructure and delaying disclosure, it shows how quickly trust can break down across the entire system.
Should companies that handle your financial data face automatic penalties when breaches expose hundreds of thousands of people? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
Whether you’re considering starting a Sonos speaker setup, or adding to an existing group, the Sonos Era 100 is worth picking up. The compact, capable smart speaker is currently marked down to $189 ($30 off) at a variety of retailers, including Amazon, Best Buy, and directly from Sonos. If you want an even lower price, Sonos is selling refurbished Era 100 speakers for just $134. They come with fresh accessories and packaging, and sport the same one-year warranty as its new speakers.
The wireless speaker has a rich, detailed sound profile, with room-filling audio despite its small size. You might be able to improve the sound further with the Sonos Trueplay feature, which uses either your phone or the speaker’s built-in microphone to automatically tune it to your space. The Era 100 can easily connect with other speakers in the Sonos ecosystem for multi-room play, even with different Sonos models.
The Era 100 has expanded functionality from previous entry-level Sonos speakers, adding in Bluetooth and USB-C wired audio, as well as improved onboard controls. While the speaker features built-in voice assistant support for both Sonos and Alexa, you can flip a switch on its back to cut power to the microphone.
NEWYou can now listen to Fox News articles!
Carnival Corporation has confirmed a data breach affecting nearly 6 million people, and the fallout could reach travelers who may not think of themselves as Carnival customers.
The company says the incident involved a social engineering attack on a single user account. In other words, someone fooled an employee and gained access to part of Carnival’s IT system.
For cruise customers, the real concern starts after the breach. Stolen personal details can help scammers write messages that feel far more believable. Here is what may have been exposed, what Have I Been Pwned found in the leaked data and what you can do now to protect yourself.
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 a.m. ET)
- Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com
MAJOR CRUISE LINE HACK EXPOSES SENSITIVE DATA OF NEARLY 6 MILLION TRAVELERS
Carnival says exposed data may include names, addresses, emails, phone numbers, dates of birth and government-issued ID numbers. (iStock)
What information was exposed in the Carnival breach?
Carnival Corporation says the breach began with a social engineering attack on a single user account. An unauthorized actor gained access to a limited part of the company’s IT system. Carnival says it immediately blocked the activity, brought in third-party security experts and alerted law enforcement.
A Carnival Corporation spokesperson told CyberGuy,
“In April, we identified unauthorized access to a limited part of our IT system caused by a social engineering attack on a single user account. We immediately blocked the activity, engaged third-party security experts and alerted law enforcement. Our investigation found certain personal information was illegally accessed. We’re notifying affected individuals and deeply regret any concern this causes. Protecting the privacy and security of personal data is a priority for us and we’ve added new layers of security and monitoring on top of the comprehensive protections already in place. We’ll also continue advancing our defenses against evolving threats.”
State breach reporting shows 5,995,277 people were affected. Carnival says the impacted data varies by individual. However, the company says the information known to be involved includes names, addresses, email addresses, phone numbers, dates of birth and government-issued identification numbers, such as driver’s license numbers and passport numbers.
What Have I Been Pwned found in the leaked Carnival data
Have I Been Pwned also analyzed the data published by ShinyHunters and said it contained 8.7 million records with 7.5 million unique email addresses. That data appeared tied to Holland America’s Mariner Society loyalty program and included names, dates of birth, email addresses, genders, geographic locations, salutations and loyalty program details.
That means this breach could affect you even if you think of yourself as a Holland America customer, not a Carnival customer. Even without a credit card number, this type of data can create problems. Criminals can use it to build fake emails, texts and calls that sound like they came from a real cruise brand. For example, a scammer could mention loyalty points, an upcoming trip, a refund or a cabin upgrade. That one familiar detail may be enough to get you to click.
What ShinyHunters claimed about Carnival
Carnival has not publicly confirmed that ShinyHunters carried out the attack. However, the extortion gang claimed responsibility in April 2026 and said it stole millions of records and internal corporate data.
ShinyHunters has also been tied to broader data theft and extortion activity involving Salesforce customers. The group often pressures companies by threatening to leak or sell stolen information.
The FBI has warned victims not to pay ransom demands from the group. Paying does not guarantee stolen data will be deleted. It also does not stop criminals from trying to extort victims again.
For you, the concern is what happens next. Once your data leaks, scammers may try to use it in emails, texts or calls that sound more believable than the usual junk.
Why the Carnival breach could put you at risk
Travel scams work because they catch you when you are excited, rushed or distracted. Maybe you booked a cruise years ago. Maybe you joined a loyalty program and forgot about it. Maybe you sailed with Holland America, Princess Cruises or another Carnival-owned brand. That old account can still have value to criminals.
Carnival has also dealt with several cybersecurity incidents before. The company disclosed breaches in March 2020 and June 2021 after attackers accessed employee email accounts. Ransomware incidents in August 2020 and December 2020 also exposed personal information tied to Carnival customers and employees.
That history does not mean every Carnival customer will face fraud. But it does show why old travel accounts deserve attention. A loyalty account can reveal more than points. It can connect your name, email, birthday, travel history and brand preferences.
That gives scammers more ways to sound convincing. A fake email may claim your loyalty points are expiring. A text may say you qualify for a refund. A caller may say your account needs verification. Those tricks can lead to stolen passwords, malware, fake payment pages or identity theft attempts.
HOW TO PROTECT YOUR ONLINE PRIVACY AND SECURITY ON YOUR NEXT CRUISE VACATION
Carnival Corporation confirmed a data breach affecting nearly 6 million people after a social engineering attack on a single user account. (Patrick Connolly/Orlando Sentinel/Tribune News Service via Getty Images)
Ways to stay safe after the Carnival breach
If you receive a Carnival breach notice, read it closely so you know what information may have been involved. Some impacted data may include government-issued identification numbers, so take these steps to lock down your accounts, spot fake cruise messages and reduce the chances that scammers can use your personal details against you.
1) Review Carnival’s offer for credit monitoring
Carnival says it is offering eligible U.S. individuals two years of complimentary credit monitoring. If you receive a notice, use the contact details in that notice or Carnival’s official breach webpage. Do not trust random links in emails, texts or search ads claiming to help you enroll.
2) Change your cruise account passwords
Go directly to the official website or app. Do not click a link from an email or text. Use a strong, unique password for every travel account. A password manager can help you create and store better passwords. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.
3) Turn on two-factor authentication
Two-factor authentication (2FA) adds another layer of protection. Even if someone steals your password, they still need a second approval. Use an authentication app when possible. Text codes help, but they can be weaker if a scammer tries a SIM swap attack.
4) Watch for fake cruise emails and texts
Be suspicious of messages about refunds, loyalty points, upgrades, cancellations or account verification. Scammers love urgent wording. They want you to click before you think. Instead, go straight to the company’s website or app. Check your account there.
5) Use a data removal service
A data removal service will not undo the Carnival breach. However, it can help remove your personal information from data broker and people-search sites. That can make it harder for scammers to combine leaked breach data with your home address, phone number, relatives’ names or other details found online. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
6) Use strong antivirus protection
Breaches often lead to phishing emails with dangerous links or attachments. Strong antivirus protection can help block malicious websites, scam pages and malware before they do damage. Also, keep your phone, tablet and computer updated. Security updates close holes that criminals try to exploit. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.
7) Do not share personal details with callers
If someone calls and claims to represent a cruise line, do not give out your date of birth, payment details or login codes. Hang up and call the company using a number from its official website.
10 SIGNS YOUR PERSONAL DATA IS BEING SOLD ONLINE
Travelers can reduce risk after the Carnival breach by changing passwords, enabling two-factor authentication and monitoring credit reports. (Daniel de la Hoz/Getty Images)
8) Monitor your bank and credit card accounts
Check your statements for charges you do not recognize. Small test charges can show up before larger fraud attempts. Report suspicious activity right away. Many banks also let you lock a card from the app while you investigate.
9) Consider a credit freeze
A credit freeze can block criminals from opening new credit accounts in your name. You can freeze your credit for free with Equifax, Experian and TransUnion. You can also lift the freeze when you need to apply for credit.
10) Review your credit reports
Check your credit reports for accounts, addresses or inquiries you do not recognize. You can get free weekly credit reports from the three major credit bureaus at AnnualCreditReport.com.
11) Watch for misuse of your ID documents
Because Carnival says some impacted data may include driver’s license or passport numbers, be extra cautious with messages asking you to “verify” your identity. Do not upload a photo of your ID through a link in an email or text. Go directly to the official company, bank or government website instead.
12) Consider identity theft protection
Identity theft protection can help monitor your personal information, credit files and financial activity for warning signs of fraud. Some plans also include breach or dark web monitoring, which can alert you if your email address or other personal details appear in known leaks. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com
13) Save the breach notice
Keep a copy of any notice you receive from Carnival. It may explain what information was involved and what support the company offers. Be careful with fake settlement or claim websites. Scammers often create lookalike pages after major breaches.
Kurt’s key takeaways
The Carnival data breach shows why travel accounts need the same care as banking, shopping and email accounts. A cruise may last a week, but the data you shared can stick around for years. Take a few minutes now to tighten your accounts. Change reused passwords, watch for cruise-themed scams and consider freezing your credit if you want stronger protection.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Have travel companies earned enough trust to keep collecting so much personal data, or should loyalty programs start asking for far less? Let us know by writing to us at Cyberguy.com.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Valve now says that the delayed Steam Machine PC and Steam Frame VR headset are set to launch sometime this summer. In a Thursday blog post detailing its Verified programs for both pieces of hardware, Valve concludes by saying that “We’re excited for players to try your titles on the new Steam hardware once they launch this summer.”
When the company originally announced the Machine and Frame alongside its new Steam Controller late last year, it said that it would start shipping the new gadgets in early 2026. But in February, the company announced that the ongoing memory and storage crunch had forced it to revisit its pricing and shipping plans. And in March, Valve said in a blog post that it would be “shipping all three products this year” — though that was after the company initially said in the post that “we hope to ship in 2026,” which it removed in an update.
Valve opted to release the Steam Controller on its own, putting it up for sale in early May. For the Machine and Frame, while “summer” isn’t exactly a specific date, it narrows the window for when the products might finally come out.
Ahead of actually launching the devices, Valve is redesigning the Steam store and sharing information about the Verified programs for the hardware so that developers can prepare their games. Like with the Steam Deck, if a game is verified for the Machine or the Frame, the badge signals that the game should work well without any tweaks from the user.
For the Machine, the requirements for a game to be verified are “nearly identical” to what they are for the Steam Deck. With the Machine being “roughly six times as powerful” as the Deck, in theory, many more games will be verified for it. Valve also says that it’s testing “every title on Machine that fell below our performance requirements on Deck.”
For the Frame, Valve’s verified badge will signify games that run well while being played natively on the headset — as opposed to games that work well streamed to the headset, which the Frame is also capable of. “Like Steam Deck Verified, the Steam Frame Standalone Verified program focuses on the experience customers will have with the device out-of-the-box in standalone mode,” Valve says.
Now, we just need Valve to share exactly when the Steam Machine and Steam Frame will be released and how much they might cost. After last week’s price hikes for the Steam Deck, I’m gearing up for sticker shock.
-
News16 minutes agoDemocrat Xavier Becerra wins the top spot in November’s race for California governor
-
Los Angeles, Ca2 hours agoMan wanted for deadly Los Angeles road rage shooting extradited from Mexico
-
Detroit, MI2 hours ago‘I could have died’: 14-year-old speaks out after surviving shooting during ‘teen takeover’ in Detroit
-
San Francisco, CA2 hours agoDriver Who Raped Woman After She Mistook His Car For An Uber Convicted By Bay Area Jury
-
Dallas, TX2 hours agoHouse fire on Dallas Court in Rockford leaves more than $100K in damage
-
Miami, FL2 hours agoWildlife officers investigate raccoon attack in North Miami
-
Boston, MA2 hours agoBoston Pride for the People Parade is set to step off, with history, protest in mind
-
Denver, CO3 hours agoHow a Christian Braun Trade to the Mavericks Could Help Nuggets
