Now Hacked
EN-GB
Data breach

Marathon Health impersonation attack exposes data of over 5.68 million people

First reported · Last reported · 13 related reports

An attacker impersonated an IT staff member at Marathon Health to obtain employee credentials, then accessed cloud applications and exfiltrated personal information. The reported number of people affected across the United States was 5,684,735. The exposed information may have included names, addresses, dates of birth, Social Security numbers, and medical and insurance information, and the company reported the breach to state authorities and other relevant bodies.

Key facts

Affected organisation
Marathon Health
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Data breach affecting 5,684,735 people across the United States
Cause / method
An attacker impersonated an IT staff member to obtain employee credentials, then accessed cloud applications and exfiltrated information
Location
United States

If your data was exposed

Exposed dataNameAddressDate of birthHealth & medical data

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. It emerged that an attacker who obtained credentials by impersonating an IT staff member had exfiltrated personal information from Marathon Health's cloud applications.
  2. The combined number of reported victims in Texas, Massachusetts and Vermont reached 272,467.
  3. The number of people affected across the United States, as reported by Marathon Health, was confirmed to be 5,684,735.

13 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.