Amplifon Americas breach exposes health and personal data of hearing-care customers (2026)
Amplifon's US arm disclosed that an intruder copied files with medical, insurance and in some cases Social Security data in a February breach revealed in November.
- Victim
- Amplifon Americas
In November 2026, Amplifon Americas — the US operation of the Milan-based Amplifon group, one of the world's largest hearing-care retailers — began notifying regulators and individuals that an outside party had copied files from some of its systems earlier in the year. The disclosure, surfacing in filings with state attorneys general and a notice on Amplifon's US website, revealed a breach that touched sensitive medical, identity and in some cases financial information.
What happened
According to Amplifon's notifications, an unauthorised party had access to company files between 18 January and 8 February 2026. Amplifon said it first detected suspicious activity on 11 February, disabling affected accounts and stepping up monitoring, but did not finish reviewing the stolen data until 6 October, after which it prepared individual notifications. No ransomware group or other threat actor had publicly claimed responsibility, and Amplifon has not said how the intruder gained access.
What was exposed
The affected files contained a broad mix of personal and health data: names, dates of birth, driver's licence or state ID numbers, hearing and other medical information, dates of service, and health-insurance details. For some individuals, the exposed data also included Social Security numbers and financial account information. Amplifon said it was not aware of any fraudulent misuse of the information.
Scale
Amplifon has not publicly confirmed a total number of victims. State breach filings disclosed 85,804 affected people in Texas and 1,027 in Vermont, while several class-action law firms cited a nationwide total of 1,332,826 drawn from the company's regulatory notifications — a figure Amplifon declined to confirm. Even on the confirmed state figures alone, the breach ranks as a substantial exposure of regulated health data, and the combination of medical records with Social Security numbers makes affected customers attractive targets for medical identity theft and fraud.
Timeline
An unauthorised party begins accessing and copying files from Amplifon Americas systems.
The intruder's access to company files ends.
Amplifon detects suspicious activity, disables affected accounts and increases monitoring.
Amplifon completes its review of the stolen data.
Amplifon begins notifying state regulators and affected individuals; the breach becomes public.
Sources
- therecord.mediahttps://therecord.media/amplifon-hearing-aid-company-data-breach
- cybernews.comhttps://cybernews.com/news/amplifon-investigates-data-breach-affecting-customers-personal-and-health-records/
- securitymagazine.comhttps://www.securitymagazine.com/articles/102733-social-security-numbers-medical-data-compromised-in-amplifon-breach