Where does the Marathon Health case file come from?

Every entry is taken from the breach report Marathon Health lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Marathon Health Data Breach

This file collects the dated facts on record for the Marathon Health incident. The state report is dated October 29, 2026. The incident itself is dated August 24, 2026.

Timeline

66 days separate the incident date from the date it was reported.

August 24, 2026Incident dateWhen the filing says the breach took place.
October 29, 2026Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: October 29, 2026
Incident date: August 24, 2026
Receiving office: Indiana Attorney General

Case notes

Marathon Health, based in Indiana, officially reported a data breach to regulators on October 29, 2026. This incident involved personal information and is noted to have occurred on or around August 24, 2026.

The public filing does not specify the nature of the breach, such as how unauthorized access occurred, nor does it detail the specific categories of personal information that were exposed. The extent of the impact, including the number of individuals affected, has also not been released in the available documentation.

According to the disclosure, the investigation into this data security incident is currently in a monitoring phase. This indicates ongoing efforts to understand the full scope and implications of the event.

Individuals who have been notified by Marathon Health should carefully review any official communications from the company. While the exact data types are not specified, it is a general best practice to remain vigilant after any data security incident.

Consider regularly checking your online accounts for any unusual activity and be cautious of unsolicited communications that might attempt to gather more personal details. These general precautions can help protect against potential misuse of any exposed information.

Questions about this case file

Where does the Marathon Health case file come from?: Every entry is taken from the breach report Marathon Health lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the Marathon Health breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files