A ransomware group has reportedly claimed a data breach involving Marquis Companies, a senior living and care provider, though the company has not publicly confirmed the incident. The specific data types allegedly involved have not been disclosed. Anyone connected to the company should monitor credit reports and watch for suspicious contact while more details emerge.
| Company | Marquis Companies |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Not Publicly Disclosed |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Oregon Department of Justice |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Marquis Companies Data Breach?
Marquis Companies, a senior living and care provider, is reportedly facing a data breach claim. A ransomware group has posted claims online stating it accessed and leaked data connected to the company. As of now, Marquis Companies has not publicly confirmed this incident occurred.
According to the claim, a group listed Marquis Companies on a leak site and marked its status as leaked. This typically means an attacker says it obtained files from a victim’s network and then released or threatened to release them. However, the exact method the group used to gain access has not been publicly disclosed.
Because this is currently an unconfirmed claim, important details remain unclear. The breach discovery date has not been publicly disclosed. As a result, affected individuals cannot yet rely on an official timeline from the company itself. Until Marquis Companies issues its own statement, the scope and accuracy of the claim cannot be independently verified.
Despite the uncertainty, the filing of a notification with a state regulator suggests the situation is being treated seriously. In response to the reported incident, Marquis Companies filed a formal data breach notification with the Oregon Department of Justice on November 21, 2025. That filing indicates the company is at least aware of a reportable data event, even though public confirmation of the full details remains limited.
Who was affected?
Marquis Companies operates assisted living, memory care, post-hospital care, and home health services. Therefore, the population potentially affected by this claimed breach could include current residents, former residents, patients, and employees. Because the company serves older adults receiving long-term and medical care, many affected individuals may belong to a vulnerable population that depends on caregivers for daily support.
The exact number of people affected has not been publicly disclosed. In addition, the geographic scope of the incident is not yet clear from available information. It is also not confirmed whether family members, guardians, or other third parties connected to residents could be impacted. Until Marquis Companies releases further details, the full picture of who was affected will remain unknown.
What Information Was Potentially Exposed?
At this time, the specific types of information allegedly involved in this incident have not been publicly disclosed. No confirmed list of exposed data categories, such as names, Social Security numbers, or medical records, has been released by the company or verified independently.
Even without confirmed details, the nature of the organization raises valid concerns. Marquis Companies provides healthcare and residential services, which often involve collecting sensitive personal details as part of normal operations. However, this article does not assume which categories, if any, were part of this specific claimed incident.
If personal information was in fact accessed, affected individuals could face a range of risks. For example, exposed identifying details can be used to open fraudulent accounts or file false tax returns. Because older adults are frequently targeted by scammers, any confirmed exposure involving this population would warrant extra caution.
Similarly, if healthcare-related information were ever confirmed as part of this incident, medical identity theft could become a concern. This type of fraud can lead to incorrect entries in a person’s medical history. It can also result in fraudulent insurance claims filed in someone else’s name. Until specifics are confirmed, however, these remain general risks rather than confirmed outcomes tied to this breach.
What is the company doing?
Because this incident stems from a ransomware group’s claim rather than a confirmed company statement, Marquis Companies has not publicly described specific remediation steps. There is no publicly available information describing containment measures, forensic findings, or internal investigation results tied to this claim.
Nevertheless, the company’s filing with a state regulator shows some level of formal response is underway. Marquis Companies submitted a data breach notification to the Oregon Department of Justice on November 21, 2025. This step suggests the organization is treating the matter as a reportable event, even though a full public statement has not been issued.
Until Marquis Companies releases additional details, affected individuals should rely on official notices rather than assumptions. In the meantime, anyone connected to the company, whether as a resident, family member, or employee, should stay alert for direct communication from Marquis Companies or its representatives.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Because this incident remains unconfirmed, it is wise to start monitoring your credit reports now rather than waiting. You can request free credit reports from the three major bureaus and review them for unfamiliar accounts or inquiries. This simple habit can help you catch fraud early, before it causes lasting damage.
In addition, consider setting up ongoing credit monitoring through a bank, credit card issuer, or dedicated monitoring service. Many of these tools send alerts when new accounts or hard inquiries appear on your file. As a result, you can respond quickly if something looks suspicious.
Watch for Phishing and Suspicious Contact
If your information was part of this claimed breach, scammers may try to use it to craft convincing phishing messages. For example, you might receive emails or calls that reference Marquis Companies or pretend to be from the organization itself. Because these messages can look legitimate, it is important to verify any request before responding.
Therefore, avoid clicking links or sharing personal details in response to unexpected messages. Instead, contact Marquis Companies directly using a verified phone number or website. This extra step can prevent you from accidentally handing over sensitive information to a scammer.
Consider a Fraud Alert or Credit Freeze
Although the specific data types involved have not been confirmed, placing a fraud alert can add a helpful layer of protection. A fraud alert requires lenders to take extra steps to verify your identity before approving new credit. This can slow down or stop identity thieves attempting to open accounts in your name.
For stronger protection, you could also place a credit freeze with each major credit bureau. A freeze restricts access to your credit file entirely, which makes it much harder for anyone to open new accounts using your identity. Because freezes are free and reversible, they are a practical option while uncertainty remains about this incident.
Stay Alert for Updates From Marquis Companies
Since Marquis Companies has not yet confirmed full details, it is important to watch for any official communication from the company. This may come in the form of a letter, email, or public notice. When it arrives, read it carefully and follow any specific instructions provided.
In the meantime, you can also check reputable consumer protection resources for updates related to this incident. If you believe you were affected and have questions about your rights, consulting a data breach attorney can help clarify your options. Many offer free case evaluations, so there is little downside to asking early questions.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Oregon Department of Justice