What Is This About?

If you received an email or letter about a data breach from Marathon Health (“Marathon”), a company specializing in employer-sponsored primary care and population health management, your personal and protected health information may be at risk from a data breach. Our firm is investigating this incident and can help you understand your rights and legal options. Our firm is also interested in speaking with people who have received care from Marathon Health

What Happened?

On August 24, 2026, Marathon received an alert of suspicious activity related to an employee’s account. Marathon disabled the employee’s account and began an investigation with the assistance of cybersecurity professionals. The investigation determined that an unauthorized individual posing as a Marathon IT worker was able to obtain the employee’s credentials, used those credentials to access a cloud-hosted application, and exported information during that access. This all happened on August 24, 2026.

Marathon then began a review of the information and files that were affected and validated that personal information was breached on September 9, 2026. On October 30, 2026, Marathon notified the Attorneys General of Texas and Vermont of the breach, as well as the Massachusetts Office of Consumer Affairs and Business Regulation. Affected individuals will receive notice of the breach via U.S. Mail.

What Information Was Impacted?

According to Marathon’s public disclosures, the following categories of information were involved:

• Names;
• Social Security numbers;
• Dates of birth;
• Contact information;
• Health information; and
• Health insurance information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you received a notice letter or email from Marathon Health, or if you are a current or former Marathon patient, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.