Threat watch / Breach
Amplifon Americas: hearing care files copied over three weeks, 1.3 million people affected
Amplifon Americas, the US arm of the Italian hearing care group Amplifon, says an unauthorized third party obtained files from certain of its systems between January 18 and February 8, 2026. It detected the activity on February 11 and found on October 6 that personal and health information may have been involved. Its filing with the Texas Attorney General, on November 6, counts 1,332,826 people affected in total. How the attackers got in is not public.
- Sector
- Health
- Way in
- Not public yet
- Product or vendor
- None named
- How it happened
- Not public yet Checked 9 Nov 2026
- What was stolen
- Files from certain systems. According to Amplifon, they may include names, contact details, dates of birth, driver's license or other government ID numbers, hearing or medical information, medical record numbers, dates of service, other health information and health insurance details. Social Security numbers or financial information may also be involved for a limited number of people. Amplifon says it is not aware of any fraudulent use.[1][2] Checked 9 Nov 2026
- Who was impacted
- Patients of Amplifon Americas in the US: 1,332,826 people in total, including 85,804 Texans, according to the company's filing with the Texas Attorney General. Amplifon's own notice gives no number and says letters with 24 months of credit monitoring go to people it has a mailing address for.[1][3] Checked 9 Nov 2026
- Threat actor
- Not attributed
Timeline
- Between January 18 and February 8, 2026, an unauthorized third party obtains files from certain Amplifon Americas systems, according to the company. [1]
- Amplifon detects suspicious activity on certain systems. It says it contained the incident by disabling impacted accounts and enhancing monitoring, brought in external cybersecurity experts and notified law enforcement. [1]
- The review of the files indicates that certain personal and health information may have been impacted. [1]
- Amplifon (USA) reports the breach to the Texas Attorney General: 1,332,826 people affected in total, 85,804 of them in Texas. The data types listed include Social Security numbers, ID and passport numbers, bank account, medical and health insurance information. [3]
- SecurityWeek reports the breach. No group has claimed the attack in the sources. [2]