Marquis, a Texas-based banking technology provider, suffered a ransomware attack resulting in exfiltration of 672,000+ records including payment card numbers and PII, creating downstream supply chain exposure for any financial institution relying on Marquis systems and triggering PCI DSS breach notification obligations. Financial institution clients should immediately suspend integrations with Marquis, rotate all shared credentials and API keys, and initiate card block/reissue workflows with card brands for affected customer cohorts. No confirmed IOCs are available; detection should focus on authentication anomalies against Marquis-integrated service accounts and downstream card-not-present fraud signals.