
Marathon Health, a company that provides advanced primary care services for employers, labor groups and public-sector organizations, experienced a data breach involving sensitive personal and health information.
So far, the incident has impacted 234,534 Texas residents, 29,075 Massachusetts residents and 8,858 Vermont residents. Marathon Health began sending written notices to affected individuals.
On Aug. 24, 2026, Marathon Health received an alert about suspicious activity related to one of its employee's accounts. The company disabled the employee's account and launched an investigation with the help of cybersecurity professionals.
The investigation found that an unauthorized individual posing as a Marathon Health IT worker was able to obtain the employee's login credentials. The intruder then used those credentials to access a cloud-hosted application and exported information during that access.
Marathon Health began reviewing the information that may have been affected. On Sept. 9, 2026, the company confirmed that personal information had been obtained by the unauthorized individual.
The compromised data may have included names, dates of birth, contact information, addresses, Social Security numbers, health records, medical information and health insurance information.
Marathon Health is offering 12 to 24 months of complimentary membership to identity monitoring services through Epiq Monitoring Solutions. To enroll, affected individuals should visit the Epiq Monitoring Solutions website and use the activation code included in their notification letter.
For questions about the enrollment process, individuals can call Epiq directly at 866-675-2006, Monday through Friday from 9 a.m. to 5:30 p.m. ET.
Marathon Health has also set up a dedicated phone line for questions about the breach. Affected individuals can call 888-517-6416, Monday through Friday from 9 a.m. to 9 p.m. ET, excluding holidays. The company can also be reached by mail at P.O. Box 1433, Portsmouth, NH 03802, or by phone at 866-434-3255.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)