VeraBank Data Breach Exposes Sensitive Customer Information via Third-Party Vendor VeraBank, a Texas-based community bank with nearly $4.3 billion in assets, is investigating a data breach involving a third-party vendor, Marquis Software Solutions. The incident, discovered on August 14, 2025, stemmed from unauthorized access to Marquis’ systems, where an attacker copied files containing VeraBank customer data. While VeraBank’s own systems remained unaffected, the breach exposed sensitive information provided to the vendor. Exposed Data Includes: - Names - Addresses - Dates of birth - Account numbers - Social Security numbers or tax ID numbers VeraBank completed its review on December 12, 2025, and began notifying affected individuals shortly after. The breach was officially disclosed to the Massachusetts Attorney General’s office on December 26, 2025. Marquis Software Solutions, which handles customer communications and data analysis for VeraBank, confirmed the cybersecurity incident but did not specify the number of individuals impacted. The law firm Shamis & Gentile P.A. is investigating potential legal action for those affected, citing possible compensation for damages related to the breach. VeraBank has offered free Cyberscout identity theft protection services to impacted customers as part of its response. The incident highlights the risks of third-party vendor breaches in the financial sector.