Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Marathon Health
healthcare · United States (Texas 234,534; Massachusetts 29,075; Vermont 8,858 per secondary summaries of state filings)
What happened
An attacker posing as a Marathon IT worker obtained an employee's credentials, used them to reach a cloud-hosted application, and exported data from a back-end healthcare operations database. Data exposed: name, date of birth, contact information and SSN. The Texas filing reportedly adds medical and health insurance information.
About 272,000 people across three states alone (secondary count). Employees and family members of employer clients are exposed to identity theft. Plaintiff firms are investigating.
What remains unknown
- national total
- which cloud application
- employer clients affected
- any threat actor claim
Losses: unknown
Capital around this company
Business development companies holding this company's debt, from their SEC schedules for the period ending 2026-06-30. That period ends before the incident was disclosed, so these marks show the position at risk, not the incident's effect. The first marks that can reflect it are dated 2026-09-30. This is a statement about dates, not a claim that any lender will mark the loan down.
| Lender | Position | Fair value | Mark | Maturity | Source |
|---|---|---|---|---|---|
| Hercules Capital, Inc. | first lien | $184.8M | 99.5% | 2029-02-01 | SEC filing |
These funds hold the debt directly. Holding a company's debt is a financial exposure to it. It does not mean the lender was affected by the incident. Full credit record: Marathon Health, LLC.
- Listed investorOAK Hcft Management Company LLC
The investor's portfolio page lists the company; current status is not stated. A portfolio listing is not a disclosed stake size or control position.
- Listed investorPotentum Partners, L.P.
The investor's portfolio page lists the company; current status is not stated. A portfolio listing is not a disclosed stake size or control position.
Sources
- California AG data breach list (entries reported 28 to 30 Oct 2026) · 2026-10-30
- Marathon Health California notification letter (CA AG sb24-632110) · 2026-10-29
- Marathon Health Data Breach (ClassAction.org) · 2026-10-30
- Marathon Health Data Breach Impacts 270K+ Individuals (ClaimDepot; state counts 234,534 TX, 29,075 MA, 8,858 VT per search snippet) · 2026-10-30
Do you lend to Marathon Health, or to companies that depend on it?
We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.