Amplifon Americas has confirmed a data breach affecting more than 1.3 million people after an unauthorized party copied files from its systems earlier this year. The Minneapolis-based U.S. arm of the Italian hearing care company began notifying people on November 5, 2026, about nine months after the intrusion.
According to the company’s public security incident notice, Amplifon detected suspicious activity on certain systems in its network on February 11, 2026. It launched an investigation with external cybersecurity experts, notified law enforcement and contained the incident. The investigation found that between January 18 and February 8, 2026, an unauthorized third party obtained files from certain systems.
What was exposed
Amplifon said a review of the affected files was not completed until October 6, 2026. That review found the following information may have been impacted:
- Names and contact information
- Dates of birth
- Driver’s license numbers and other state or government-issued ID numbers
- Hearing and medical information, medical record numbers and dates of service
- Other health information
- Health insurance ID numbers and other health insurance information
For a limited number of individuals, Social Security numbers and financial information may also have been impacted. The company said it was not aware of any fraudulent use of personal information as a result of the incident.
How many people are affected
Amplifon’s filing with the Texas Attorney General lists 1,332,826 people affected in total, including 85,804 Texas residents. A separate notice to the Vermont Attorney General, dated November 5, lists 1,027 Vermont residents. The Texas filing categorizes Amplifon as a healthcare medical provider and says the incident was discovered on October 6, 2026, the date the data review concluded.
Amplifon Americas is part of Amplifon Hearing Health Care, which runs hearing benefit programs for health plans, employers and membership groups through a nationwide provider network. The notice does not say which of those groups the affected people belong to, so it is not clear whether patients, plan members or employees make up the 1.3 million total.
What Amplifon is offering
The company said it will mail notices to potentially affected individuals for whom it has a valid mailing address. The notices will include enrollment information for 24 months of free credit monitoring and identity protection for certain individuals, including those whose financial information or Social Security number was affected. Amplifon also set up a call center for questions and advised people to review account statements and explanations of benefits for suspicious activity.
What has not been disclosed
Amplifon has not said how the attackers got into its network or which systems were accessed. It has not named the group responsible, has not said whether a ransom demand was made and has not confirmed whether a vendor was involved. The gap of roughly eight months between the end of the intrusion and the completion of the data review is also unexplained beyond the time needed to analyze the files.
The disclosure adds to a run of large healthcare-related breaches reported this year. BreachNews has also covered the Aesto Health breach exposing 9.5 million patients and the CareCloud breach affecting an electronic health record system. Readers can also look up reported U.S. healthcare incidents in the HIPAA breach tracker.
What affected people should do
Anyone who receives a notice should read it carefully and use the credit monitoring enrollment details if offered. Because the exposed data can include Social Security numbers, government ID numbers and insurance details, a credit freeze with the three major bureaus is a sensible precaution. Review insurance explanations of benefits for services you did not receive, and be wary of unsolicited calls, texts or emails that mention hearing care or your health plan.
