1st MidAmerica Credit Union data breach: 131,070 people, through its marketing vendor Marquis

Why did 1st MidAmerica members get a letter from Marquis?

Because Marquis held their data for the credit union. The letter describes Marquis as a digital and physical marketing and communications vendor for the reader's financial institution, and names the institution in a field filled in for each letter. Vermont's attorney general posted the letter on January 30, 2026 under the credit union's name. That is why the sender on the envelope is a company most members have never dealt with. The guide to letters from companies you never dealt with explains how to check that such a letter is real.

The Marquis Software Solutions entry covers the vendor's side: the August 14, 2025 intrusion, the waves of letters on behalf of dozens of banks and credit unions, and the state counts. Indiana's breach date for 1st MidAmerica is the same day.

What happened, and when?

Date	What happened	Source
August 14, 2025	Breach date in Indiana's record; the day Marquis found the intrusion	Indiana record; Marquis entry
January 22, 2026	Notice to Indiana residents	Indiana record
January 30, 2026	Vermont's attorney general posts the notice to consumers	Vermont posting
February 2, 2026	Texas's attorney general publishes the report (535 Texans)	Texas record

The letter itself is short on the incident. It says Marquis secured its network and investigated on learning of it, and that there is no evidence anyone's information has been misused. It does not say how the intruder got in. From the breach date to the notice date in Indiana's record was 161 days.

What information was involved in the 1st MidAmerica breach?

Each letter lists the reader's own items: the filed copy says the information includes first and last name together with a field filled in for each person. The letter calls it personal and financial information. Texas's record, filed under the credit union's name, lists four types: name, Social Security number, financial information such as an account, credit or debit card number, and date of birth. The record gives the credit union's home as Bethalto, Illinois, and says notice went by U.S. mail. Those are the same categories the state records list for the Marquis incident as a whole, as the Marquis entry's table shows.

How many people were affected?

131,070 people, the total 1st MidAmerica reported to Indiana; 289 live in Indiana and 535 in Texas.

Marquis client notice	Record	People affected in total
Old National Bank (Marquis entry)	Indiana attorney general	672,075
1st MidAmerica Credit Union	Indiana attorney general	131,070

No record gives a total for the whole Marquis incident, because each client filed for its own members. Of the Marquis client notices identified in this log, only Old National Bank's is larger. In the ranking of the largest 2026 breach notices, it sits just below the Hightower Holding notice (131,483).

What is offered to people who got a letter?

A complimentary membership in Epiq Privacy Solutions ID, which the letter's text gives as 24 months; the enrollment section leaves the length as a 12 or 24 month field. The service is single-bureau credit monitoring with alerts, basic dark web monitoring of one email address, phone number, name, date of birth and Social Security number, help with credit freezes, change-of-address monitoring and identity restoration.

Item	Detail from the filed letter
Provider	Epiq, Privacy Solutions ID (1B Credit Monitoring, Basic)
Enrollment	www.privacysolutionsid.com, with the activation code on the letter
Marquis response line	855-403-1764, 9 a.m. to 9 p.m., Monday to Friday
Epiq help	866.675.2006, Monday to Friday, 9:00 a.m. to 5:30 p.m. ET

The enrollment deadline is printed on each letter. The guide to credit monitoring offers in breach letters compares this kind of single-bureau service with the three-bureau offers some letters make.

Was my information in the 1st MidAmerica Credit Union data breach?

If you got a letter from Marquis Software Solutions that names 1st MidAmerica Credit Union, your information was in Marquis's files. If you are a member and did not get one, the Marquis response line above is the number the letter gives for questions. The letter also tells readers to change passwords and tell their financial institution if they see suspicious activity, and to watch statements and credit reports for the next 12 to 24 months. The guide to bank, brokerage and mortgage breach notices compares what other financial firms and their vendors told customers.

What the documents leave open

• Which of the four data types each member's file held.
• How Marquis's network was entered.
• Whether the 131,070 includes former members and people who only had a transaction with the credit union.
• How many states 1st MidAmerica or Marquis notified for these members.