Where does the Marquis case file come from?

Every entry is taken from the breach report Marquis lodged with the Massachusetts Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Marquis Data Breach

This file collects the dated facts on record for the Marquis incident. The state report is dated November 20, 2025.

Timeline

November 20, 2025Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: November 20, 2025
Receiving office: Massachusetts Attorney General

Case notes

Marquis filed a report with the Massachusetts Attorney General on November 20, 2025, concerning a data security incident. The company, which operates in the healthcare and senior living sector, indicated that its digital environment may have been compromised by unauthorized actors. An investigation into the full scope of the incident is currently underway.

As a provider of residential care and medical support services, Marquis routinely handles a significant volume of personal information necessary for administering patient care and processing benefits. This includes various forms of personal identifiers and related data. The nature of its operations makes the organization a custodian of sensitive personal details.

While the exact nature of the information involved in this specific incident has not been detailed in public filings, data security incidents in the healthcare sector often involve sophisticated cyberattacks. These can lead to unauthorized access to internal networks and the potential exfiltration of sensitive files, putting the personal information entrusted to the organization at risk.

For individuals whose personal information was part of this incident, there is a heightened risk of various forms of identity-related concerns. Compromised personal data can be exploited, leading to potential misuse. It is important for individuals to understand that such incidents can lead to ongoing vigilance requirements.

As a general precaution, individuals are advised to remain vigilant by monitoring their financial accounts and credit reports for any suspicious activity. They should also consider placing a fraud alert or security freeze on their credit files. Reviewing statements and reports regularly can help detect any unauthorized use of personal information quickly.

Questions about this case file

Where does the Marquis case file come from?: Every entry is taken from the breach report Marquis lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files