Marathon Health Data Breach Impacts 270K+ Individuals

Published
October 30, 2026
Updated
October 30, 2026
Marathon Health Data Breach Impacts 270K+ Individuals
Marathon Health
Affected by the data breach? You may be entitled to compensation. Submit a claim today.

Marathon Health, a company that provides advanced primary care services for employers, labor groups and public-sector organizations, experienced a data breach involving sensitive personal and health information.

So far, the incident has impacted 234,534 Texas residents, 29,075 Massachusetts residents and 8,858 Vermont residents. Marathon Health began sending written notices to affected individuals.

On Aug. 24, 2026, Marathon Health received an alert about suspicious activity related to one of its employee's accounts. The company disabled the employee's account and launched an investigation with the help of cybersecurity professionals.

The investigation found that an unauthorized individual posing as a Marathon Health IT worker was able to obtain the employee's login credentials. The intruder then used those credentials to access a cloud-hosted application and exported information during that access.

Marathon Health began reviewing the information that may have been affected. On Sept. 9, 2026, the company confirmed that personal information had been obtained by the unauthorized individual.

The compromised data may have included names, dates of birth, contact information, addresses, Social Security numbers, health records, medical information and health insurance information.

Marathon Health's response to the breach

Marathon Health is offering 12 to 24 months of complimentary membership to identity monitoring services through Epiq Monitoring Solutions. To enroll, affected individuals should visit the Epiq Monitoring Solutions website and use the activation code included in their notification letter.

For questions about the enrollment process, individuals can call Epiq directly at 866-675-2006, Monday through Friday from 9 a.m. to 5:30 p.m. ET.

Marathon Health has also set up a dedicated phone line for questions about the breach. Affected individuals can call 888-517-6416, Monday through Friday from 9 a.m. to 9 p.m. ET, excluding holidays. The company can also be reached by mail at P.O. Box 1433, Portsmouth, NH 03802, or by phone at 866-434-3255.

SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
Marathon Health
Consumers Notification date
Date of Breach
August 24, 2026
Breach Discovered Date
August 24, 2026
Total People Affected
Information Types Exposed
  • Social Security Numbers
  • Health Records
  • Names
  • Dates of birth
  • Contact information
  • Addresses
  • Medical information
  • Health insurance information
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image