Community 1st Credit Union, a not-for-profit financial cooperative serving Iowa and Missouri, experienced a data breach through its third-party vendor, Marquis Software Solutions (a marketing and compliance software provider). Initially believed to involve no sensitive data, further investigation confirmed that personally identifiable information (PII) of 6,876 members—including names, dates of birth, Social Security/Tax ID numbers, addresses, phone numbers, email addresses, and financial details—was exposed. The breach was discovered in August 2025, with confirmation of sensitive data exposure on October 27, 2025. Affected individuals were notified in November 2025. The incident poses risks of identity theft, financial fraud, and unauthorized account activity, prompting the credit union to offer free identity theft protection services and legal recourse for compensation.