AWKO Law LLP is investigating a data breach that led to unauthorized access to the sensitive information of patients of Marathon Health, an Indiana-based healthcare provider that partners with employers, unions, and public sector organizations.

On August 24, 2026, Marathon Health discovered that an unauthorized actor gained access to an employee’s credentials, accessed a cloud-hosted application, and exported patient data. On October 30, 2026, Marathon Health disclosed to the Texas Office of the Attorney General that 234,534 Texas residents were impacted.

Although the breach occurred in August 2026, Marathon Health did not begin sending notifications until October 2026, which may have violated state and federal laws. The following data may have been compromised in the breach: names, dates of birth, Social Security numbers, and contact information.

If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to Marathon Health’s cybersecurity practices.

If you received notification of this data breach or are a patient of Marathon Health and wish to obtain additional information about your legal rights, please contact us today at (415) 251-6804 or sdixit@awkolawllp.com.

View source version on businesswire.com: https://www.businesswire.com/news/home/20261102468846/en/