SonicWall Data Breach Lawsuit: Status and Claims

Litigation connected to the SonicWall cloud backup security incident includes consumer class actions against Marquis Software Solutions Inc. and a commercial lawsuit against SonicWall Inc. in Texas federal court. Neither case has reached a settlement.

A SonicWall data breach lawsuit dispute stems from a security gap in the MySonicWall cloud backup service that exposed firewall configuration data. The incident led to a downstream ransomware attack against financial technology provider Marquis Software Solutions Inc., as reported by BleepingComputer. If your sensitive personal or banking information was compromised during a security incident, our guide on what to do after a data breach details your statutory protections.

At LawfareClaims.org, we track pending cybersecurity lawsuits so affected bank and credit union customers can evaluate their legal positions. Current legal proceedings involve consumer class actions against Marquis Software Solutions Inc. and credit unions rather than direct consumer claims against SonicWall Inc. This guide outlines the court filings, the claims between Marquis Software Solutions Inc. and SonicWall Inc., and the steps you can take today.

The Cloud Backup Exposure and Downstream Attack

A February 2025 Application Programming Interface (API) code update introduced a vulnerability into the MySonicWall cloud backup service. The flaw permitted an unauthorized third party to access stored firewall configuration backup files by using predictable device serial numbers. The accessed backup files contained decoded general configuration settings alongside encrypted system credentials.

SonicWall Inc. published an incident advisory regarding the exposure on September 17, 2025. In the SonicWall incident notice, SonicWall Inc. initially estimated that the vulnerability affected less than 5 percent of firewalls, but later confirmed that the incident affected all cloud backup customers. Credential data in the backups remained encrypted with Advanced Encryption Standard (AES) 256-bit keys on newer hardware generations, and Triple Data Encryption Standard (3DES) on older Generation 6 hardware.

Marquis Software Solutions Inc., a Texas technology provider serving over 700 financial institutions, detected a ransomware intrusion on August 14, 2025. In subsequent legal filings, Marquis Software Solutions Inc. stated that the intruder used credentials obtained through the SonicWall Inc. backup breach to execute the ransomware attack. The operational disruption at Marquis Software Solutions Inc. allegedly affected core services at 74 U.S. banks.

Exposed Consumer Records and Banking Notifications

The security intrusion at Marquis Software Solutions Inc. compromised personal data belonging to at least 400,000 individuals across the United States. Reporting from ClassAction.org documents that approximately 354,000 of the confirmed individuals reside in Texas. Because state regulators receive continuous breach reporting updates, the total tally of affected consumers has increased over time and may change further.

Civil complaints document that the compromised consumer files contained highly confidential identifying records. The exposed categories include full names, residential addresses, dates of birth, telephone numbers, and financial account details. The compromised databases also contained Social Security numbers and Taxpayer Identification Numbers.

Marquis Software Solutions Inc. began distributing official breach notification letters to affected account holders on October 27, 2025. That initial notification date occurred approximately two and a half months after the August 14, 2025 cyberattack was discovered. Consumer plaintiffs allege that this notification timeline left account holders vulnerable to identity theft without adequate warning.

Parties Named in Pending Consumer Class Actions

Consumer class action litigation targets Marquis Software Solutions Inc. and its institutional clients rather than naming SonicWall Inc. directly. The leading consumer action, Noreika v. Marquis Software Solutions Inc., et al., was filed on January 30, 2026, under Case Number 4:26-cv-00108. That lawsuit is pending in the U.S. District Court for the Eastern District of Texas.

The Noreika lawsuit names Marquis Software Solutions Inc., CoVantage Credit Union, and University Credit Union as formal defendants. SonicWall Inc. is not named as a defendant in that consumer class action. Marquis Software Solutions Inc. states in its own court filings that it is defending against more than 30 separate consumer class actions, a count some outlets, including Top Class Actions, report as up to 36 related cases.

The consumer claims against Marquis Software Solutions Inc. and the credit unions center on several distinct legal theories. Plaintiffs assert causes of action for negligence, breach of implied contract, and unjust enrichment. The filings also allege violations of the California Unfair Competition Law (UCL), asserting that the defendants failed to maintain reasonable cybersecurity controls.

The Commercial Lawsuit Between Marquis and SonicWall

SonicWall Inc. faces commercial liability claims brought directly by Marquis Software Solutions Inc. rather than claims filed by everyday consumers. Marquis Software Solutions Inc. filed Marquis Software Solutions, Inc. v. SonicWall Inc. on February 23, 2026, in the U.S. District Court for the Eastern District of Texas. This lawsuit is an independent business dispute rather than a proposed consumer class action.

The complaint filed by Marquis Software Solutions Inc. alleges negligence, gross negligence, negligent misrepresentation, and unjust enrichment against SonicWall Inc. Marquis Software Solutions Inc. asserts that SonicWall Inc. failed to exercise reasonable care when managing stored client data. The lawsuit claims SonicWall Inc. used predictable hardware serial numbers and failed to secure Multi-Factor Authentication (MFA) scratch codes stored within configuration files.

Marquis Software Solutions Inc. seeks compensatory damages and full indemnification from SonicWall Inc. for any judgments or settlements arising from consumer class actions. The lawsuit also requests reimbursement of legal expenses and statutory attorneys' fees. Readers should remember that these filings contain unproven allegations from active civil complaints rather than established judicial conclusions.

Procedural Status and SonicWall Remediation Guidance

Both the consumer class actions and the commercial lawsuit between Marquis Software Solutions Inc. and SonicWall Inc. remain in preliminary litigation stages. Neither the U.S. District Court for the Eastern District of Texas nor any other presiding court has certified a class, approved a settlement, or established a compensation fund. Any online solicitation promising a guaranteed monetary payout for this incident is unauthorized and inaccurate.

SonicWall Inc. issued specific technical remediation guidance for organizations using MySonicWall cloud backups. SonicWall Inc. advised administrators to log into their MySonicWall portal, review the designated Issue List for compromised device serial numbers, and prioritize appliances marked with an Active High Priority flag. SonicWall Inc. also published dedicated credential rotation workflows and security remediation tools.

Because active litigation takes months or years to resolve, account holders must wait for formal judicial rulings before any claims process can occur. If the parties ever resolve the litigation, the court will appoint an administrator to supervise distribution. You can read about how court-supervised resolutions manage remaining balances in our analysis of unclaimed settlement money, or view active claims on our settlements directory.

Security Measures for Financial Account Holders

Account holders whose banks or credit unions rely on Marquis Software Solutions Inc. should take immediate steps to protect their personal finances. Relying on pending litigation in federal court will not prevent identity theft or unauthorized account access.

You should implement four concrete measures to safeguard your personal credit profile:

1. Place a free security freeze on your credit files at Equifax, Experian, and TransUnion to prevent unauthorized new credit lines.
2. Enroll in any complimentary credit monitoring or identity restoration services provided in your formal breach notice letter.
3. Review banking ledgers and monthly statements regularly for unauthorized charges, withdrawals, or suspicious electronic debits.
4. Update passwords with long, unique combinations across all online banking, investment, and mortgage portals.

Retain all physical letters and electronic notices sent by your credit union, bank, or Marquis Software Solutions Inc. Keep documentation of any out-of-pocket costs or time spent dealing with fraudulent transactions. These records will serve as the proof of loss you need if an authorized claims process is established in the future. You can monitor open legal matters on our class actions hub.

Frequently Asked Questions

Is there a class action lawsuit against SonicWall?

No consumer class action has been filed directly against SonicWall Inc. for this incident. SonicWall Inc. is currently a defendant in a commercial lawsuit filed by Marquis Software Solutions Inc., while consumers have filed class actions against Marquis Software Solutions Inc. and affiliated credit unions.

What is the SonicWall data breach lawsuit about?

The dispute involves an API security vulnerability in MySonicWall cloud backups that let unauthorized parties view firewall configurations. Marquis Software Solutions Inc. alleges this exposure allowed cybercriminals to execute a ransomware attack against its banking systems, leading to multiple consumer lawsuits.

Who is Marquis Software Solutions and why are they involved?

Marquis Software Solutions Inc. is a Texas-based technology vendor serving more than 700 banks, credit unions, and mortgage lenders. A ransomware attack on its networks on August 14, 2025 disrupted 74 banks and exposed customer records, prompting more than 30 consumer class actions.

Was my data part of the SonicWall breach?

Consumers were not exposed directly on SonicWall Inc. systems, but individual records were compromised if a bank or credit union used Marquis Software Solutions Inc. Marquis began mailing formal breach notification letters to at least 400,000 affected consumers starting October 27, 2025.

Is there a settlement in the SonicWall or Marquis lawsuits yet?

No settlement exists in either Noreika v. Marquis Software Solutions Inc. or Marquis Software Solutions, Inc. v. SonicWall Inc. Both cases remain active in the U.S. District Court for the Eastern District of Texas with no approved payout fund.

What should I do if my bank or credit union used Marquis or SonicWall?

You should place a security freeze with Equifax, Experian, and TransUnion, enroll in any identity monitoring services offered in your breach notice, and review your financial accounts for unauthorized activity.

Who is representing plaintiffs in the Marquis data breach class action?

Plaintiff representation in Noreika v. Marquis Software Solutions Inc. is documented in filings before the U.S. District Court for the Eastern District of Texas. Consumers can inspect the docket records or review updates through reputable legal reporting platforms.