Amplifon Breach Exposes 1.3 Million Records: What Affected Patients Must Do
Hackers stole files on 1.33 million people from hearing care firm Amplifon, including Social Security numbers and medical records, after an eight-month breach.
Image: Wikimedia Commons / U.S. Air Force photo by Andrea Jenkins
MINNEAPOLIS, Nov. 10 — Hackers stole files containing the personal information of 1,332,826 people from Amplifon (USA), Inc., the hearing care company said in a filing with the Texas Attorney General, in one of the largest health-data breaches disclosed in the United States this year.
An unauthorized party copied files from certain systems between January 18 and February 8, 2026, the company said. Amplifon detected suspicious activity on February 11 and opened an investigation with outside specialists, but needed eight months to review the files. The review found on October 6 that personal information may have been involved.
- 1,332,826 people affected nationwide, including 85,804 in Texas and 1,027 in Vermont, according to state filings.
- Files were copied between January 18 and February 8, 2026; personal data was confirmed involved on October 6.
- Exposed data includes names, addresses, birth dates, driver's licence numbers, medical records and health insurance details; Social Security numbers and financial details for a limited number of people.
- Amplifon says it is not aware of any fraudulent use; no hacking group has claimed the attack.
How Many People Were Affected by the Amplifon Data Breach?
Amplifon told the Vermont Attorney General on November 5 that 1,027 Vermont residents were affected, and told the Texas Attorney General on November 6 that 1,332,826 people were affected nationwide, including 85,804 Texans. The 85,804 figure covers Texas residents only.
Amplifon Americas is the Minneapolis-based arm of Amplifon S.p.A., the hearing healthcare group based in Milan, Italy. The company says it serves more than 80 million members through thousands of clinics. Some affected people may know Amplifon only through their health plan's hearing benefit, not as a store they visited.
What Personal Information Was Stolen in the Amplifon Breach?
According to the company's notice, the files taken may include names, addresses and dates of birth, driver's licence numbers, hearing and medical information, medical record numbers, dates of service, and health insurance details.
For a limited number of people, Social Security numbers and financial account information were also exposed. The company has not said how many people fall into that smaller group, and it has not described the method of intrusion or identified the attack as ransomware. For scale, medical device maker iRhythm said last month that 8,179,772 people were affected by a cyberattack on its systems. The breach also follows the Vanderbilt University ransomware attack, disclosed on November 9, and the breach at AI firm Fireworks.
What Should You Do If You Received an Amplifon Breach Letter?
A letter states which categories of your information were involved. People whose financial information or Social Security numbers were affected are being offered 24 months of free credit monitoring and identity protection, according to the company's notice.
Anyone concerned can place a fraud alert or a credit freeze with the three credit bureaus, Equifax, Experian and TransUnion. Affected people should also watch for medical bills or insurance statements for care they did not receive.
| Date | What happened |
|---|---|
| Jan. 18 – Feb. 8, 2026 | Files copied from Amplifon systems |
| Feb. 11, 2026 | Suspicious activity detected; investigation starts |
| Oct. 6, 2026 | Review finds personal data may be involved |
| Nov. 5, 2026 | Vermont notified; 1,027 residents affected |
| Nov. 6, 2026 | Texas filing reports 1,332,826 affected nationwide |
| Nov. 9, 2026 | Breach publicly reported |
Frequently Asked Questions
Was my Social Security number exposed in the Amplifon data breach?
Only for a limited number of people, according to the company. Your notification letter states which categories of your information were involved.
How do I know if I am affected by the Amplifon breach?
Amplifon is notifying people by US mail and has posted a notice on its website. People who used hearing care benefits it administers may be affected even if they never visited a clinic.
Is Amplifon offering free credit monitoring after the breach?
Yes, for some. People whose financial information or Social Security numbers were affected are being offered 24 months of free credit monitoring and identity protection, according to the company's notice.
Has anyone claimed responsibility for the Amplifon breach?
No. Amplifon has not described how the intruders entered its systems or whether ransomware was involved, and says it is not aware of any fraudulent use of the data so far.
Amplifon has not said when it will finish notifying everyone affected. SecurityWeek said it has emailed the company for confirmation of the total and will update its report if Amplifon responds.
