Fintech firm Marquis Software Solutions has filed a lawsuit against SonicWall, alleging that a security failure in the provider’s cloud infrastructure paved the way for a massive ransomware attack.

The Core Allegations

• The Entry Point: Marquis claims the Akira ransomware group bypassed their defenses not through a firewall exploit, but by using stolen data from the MySonicWall backup service.
• The “Scratch Code” Leak: The suit alleges that an API vulnerability allowed hackers to steal firewall configuration files and emergency “scratch codes,” which provided a direct back door into Marquis’s network.
• SonicWall’s Liability: Marquis blames a specific API code change made by SonicWall in early 2025 for creating the security gap.

Wide-Ranging Impact

The resulting breach in August 2025 was significant:

• Banking Disruptions: Operations for at least 74 U.S. banks and credit unions were compromised.
• Data Exposure: Sensitive info, including Social Security numbers and financial account details for hundreds of thousands of customers, was exfiltrated.

SonicWall’s Position

While SonicWall admitted to a security incident in late 2025—eventually confirming it affected all cloud-backup customers—the company has pushed back against the lawsuit. They have requested that Marquis provide forensic proof directly linking the SonicWall incident to the specific ransomware deployment on Marquis’s systems.

Marquis is seeking a jury trial and damages for the massive financial and reputational fallout.