- Aug 24: Marathon got an alert about suspicious activity on an employee's account and disabled it; the access lasted a few hours.
- The attacker posed as a Marathon IT worker, got the employee's credentials and reached a cloud-hosted app.
- Sep 9: Marathon confirmed personal information was taken.
- Marathon's notice says the data varies by person and may include name, date of birth, contact information and Social Security number. About 5.68 million people are reportedly affected overall, with 234,534 in Texas, 29,075 in Massachusetts and 8,858 in Vermont.
- Marathon serves employers' workers and their families. Some people who never got care from Marathon may be included, because it keeps data to manage benefits, for example for certain Indiana University medical plans.
- Watch your mail for a Marathon Health letter and use its activation code to enroll in the free credit monitoring.
- Place a free credit freeze at Equifax, Experian and TransUnion (each one separately).
- Check your free credit reports and statements for anything you don't recognize.
- Be wary of calls claiming to be IT or support asking for logins.
Useful?