CoVantage Credit Union has disclosed a significant data breach stemming from a cyberattack on its third-party vendor, Marquis Software Solutions. Sensitive consumer data was accessed by an unauthorized party, prompting concern for those affected.
CoVantage Credit Union’s Data Breach Investigation
CoVantage Credit Union, a financial institution known for providing a range of banking services to its members, has reported a data breach affecting its customers. However, the breach did not originate directly from CoVantage’s systems. Instead, the incident occurred at Marquis Software Solutions, a third-party vendor contracted by CoVantage.
On August 14, 2025, Marquis discovered unusual activity within its network. A cybersecurity investigation confirmed that this was the result of a cyberattack, during which an unauthorized actor gained access to Marquis’ systems. The attacker is believed to have accessed and possibly exfiltrated files containing personal consumer data. Marquis took immediate action, initiating an investigation with the support of cybersecurity professionals and notifying federal law enforcement.
As part of their response, Marquis hired an external data analysis firm to identify which individuals were affected and what data was compromised. This review concluded around late October 2025, after which Marquis began the process of notifying organizations like CoVantage and their affected customers.
While there is currently no confirmed evidence of the misuse of personal information, the nature of the compromised data raises substantial privacy and financial concerns. Given the inclusion of sensitive data like Social Security numbers and financial account details, affected individuals may be vulnerable to identity theft and other forms of fraud.
This incident underscores the risks associated with third-party vendors, especially in industries that handle sensitive personal and financial information. CoVantage members now face uncertainty over how their personal information could be used, and this breach has highlighted the broader issue of vendor accountability in the digital age.
For consumers, this is a powerful reminder that even trusted financial institutions may inadvertently expose their clients to harm when working with external service providers. Class Action U exists to help individuals make sense of these situations, offering guidance and legal connections for those seeking justice and compensation. If you’re a CoVantage member and were notified about this breach, it’s essential to understand your rights and take steps to protect yourself.
When Did This Breach Occur?
The breach was discovered on August 14, 2025. By September 8, 2025, Marquis had engaged a data expert to assess the extent of the impact. Notifications to affected entities began on or around October 27, 2025.
What Information Was Breached?
- Names
- Addresses
- Phone numbers
- Social Security numbers
- Financial account information
- Dates of birth
What You Can Do
If you are a CoVantage Credit Union customer, take immediate action to protect your identity and finances. Begin by monitoring your credit reports through the three major credit bureaus—Equifax, Experian, and TransUnion. Consider placing a fraud alert or security freeze on your credit files to prevent unauthorized accounts from being opened.
You should also be wary of phishing attempts and monitor your financial statements closely for any suspicious activity. It’s a good idea to change your passwords on any financial accounts and enroll in identity theft protection services if available.
Most importantly, don’t go through this alone. If you’ve received a notification regarding this breach, Class Action U can connect you with legal professionals who specialize in data breach litigation. You may be entitled to financial compensation or other legal remedies—even if there is no immediate evidence of fraud.
File a Data Breach Lawsuit Against CoVantage Credit Union
If CoVantage Credit Union has informed you that your personal information was compromised due to the Marquis Software Solutions data breach, you may have grounds for a lawsuit. Victims of data breaches often suffer from financial fraud, identity theft, and long-term credit damage.
Filing a class action lawsuit can help you pursue compensation and ensure companies are held accountable for negligence—especially when third-party vendors are involved. Even if you haven’t experienced direct harm yet, your data may still be at risk, and acting quickly can protect your legal rights.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.