Amplifon Americas: breach exposes health and ID data, some SSNs, of ~1.3M US individuals
Severity: high · Patch status: no-fix-needed · Since 2026-11-05
Amplifon Americas, the US arm of the hearing-care group Amplifon, says an unauthorized third party obtained files from certain internal systems between January 18 and February 8, 2026. It detected suspicious activity on February 11, contained it, notified law enforcement, and on October 6, 2026 determined that personal information may have been affected. The files may include names, contact details, dates of birth, government ID numbers, hearing and medical information, service dates and health-insurance identifiers. Financial information or Social Security numbers may have been taken for a limited number of people. The total is not in Amplifon's notice. SecurityWeek reports that a Texas Attorney General filing reportedly counts 1,332,826 people nationwide, and that figure is unconfirmed. Vermont's breach listing shows 1,027 Vermont residents, with Social Security numbers and health records. Amplifon says it knows of no fraudulent use of the data. I found no public attribution to a threat actor or technique in the sources reviewed.
What to do
- If you are an Amplifon member or patient, watch for breach notification letters and enroll in any offered identity/credit monitoring
- Monitor credit reports and place fraud alerts or credit freezes, especially since SSNs were involved
- Be alert to phishing that references Amplifon, hearing care, or health insurance using stolen personal details
- Organizations handling health data: review detection and exfiltration controls for internal file-copying, and shorten the gap between incident and data-impact determination
- Verify whether your health insurer or benefits program shares data with Amplifon and review downstream exposure
Sources
All live incidents on Threat Watch
