Marathon Health

An intruder posing as Marathon IT obtained an employee's credentials on Aug. 24, then spent a few hours exporting names, birthdates, contact details, and Social Security numbers from a cloud-hosted application. Marathon reportedly told Texas regulators that 5.68 million people were affected; the application and the claiming group go unnamed. Many of them never saw a Marathon clinician and only enrolled in a plan it administered. One borrowed identity was enough to empty a database built to hold everyone who might someday need care.