Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

US critical infrastructure monitor

Marathon Health

Healthcare · IN (headquarters)

Monitoring
Not directly monitored. Shown from research findings only.
Public findings
1
Provider status posts on record
0

Cyber and operational findings

Analyst-reviewed records. The grade states how well the cause is established; event, first public observation and acknowledgement are separate dates.

A ConfirmedStatus: unknown

Older incident disclosed in window. Social engineering (attacker posed as IT) gave access to a cloud-hosted app; data exported within hours on 24 Aug. CA AG listing reported 29 Oct; HIPAA Journal 3 Nov cites Texas AG filing of 5,684,735 notified (conflicts with TX AG resident count 234,534 and other reports of about 270K). Letters from 20 Oct.

Event: Aug 24
First public: Oct 20
Third-party report: Nov 3
Acknowledged: Oct 20

Other explanations considered: Count conflict, not cause conflict.; AG lists do not state cause; may be vendor breach, misdirected mail, or insider error rather than intrusion.

  1. Aug 24 · DIS
    Older incident disclosed in window. Social engineering (attacker posed as IT) gave access to a cloud-hosted app; data exported within hours on 24 Aug. CA AG listing reported 29 Oct; HIPAA Journal 3 Nov cites Texas AG filing of 5,684,735 notified (conflicts...
    Source
  2. Aug 24 · DIS
    State AG breach posting in window. Incident date 2026-08-24; posted 2026-10-29; records 5,687,724 total (IN AG); 8,858 VT. Disclosure lag about 66 days.
    Source

Provider status posts

Collected from the organisation's own public status page. These are its words; DFX adds only the wording classification.

No status posts collected for this organisation.

Documented dependents

Organisations publicly documented as relying on this provider. A relationship is not an impact.

Marathon Health
reported
  • Employer clients and plan members (Indiana University named by HIPAA...No confirmed impact