2026 Marathon Health — unauthorised access to an employee account exposed personal and health data; 234,534 Texans and 8,858 Vermonters notified
Data compromised
Name, address, Social Security number, medical information, health insurance information and date of birth, per the Texas filing. An aggregator's figure of 270,000+ is unverified.
Technical writeup
Company-filed regulator notices. The notice letters were not reviewed, and the Massachusetts filing returned an error to our tools. The August 24 date is from secondary coverage.
Root cause
Marathon Health says an employee account was accessed without authorisation. Notices to state regulators in Texas, Vermont and California were posted on October 29–30, 2026, and say that personal and health data was taken. The total number affected has not been disclosed.