Hearing-Care Provider Amplifon Americas Says a January Intrusion Exposed Health and ID Data for More Than 1.3 Million People
Amplifon Americas, the Minneapolis-based arm of the Italian hearing-care group, says attackers copied files between January 18 and February 8, 2026. An eight-month review found medical, insurance and government ID details, plus Social Security numbers for some people. A Texas filing reportedly lists 1,332,826 affected.
Amplifon Americas, the US hearing health care business of Italy’s Amplifon, is notifying more than 1.3 million people that their personal and medical information may have been taken in an intrusion that began in January.
The details below come from SecurityWeek’s report on the Amplifon Americas breach, which draws on the company’s data breach notice and a filing with the Texas Attorney General’s Office.
The briefing in brief
- Who: Amplifon Americas, based in Minneapolis. The company says it serves more than 80 million members through a nationwide network of thousands of clinics.
- How many: The Texas filing reportedly puts the total at 1,332,826 people nationwide.
- When: Attackers got into internal systems in January 2026 and copied files from certain systems between January 18 and February 8.
- Fraud so far: “We are not aware of any fraudulent use of personal information as a result of this incident,” the company says.
Why notification took most of the year
Amplifon says it contained the incident right away and opened an investigation. But working out exactly whose information sat in the copied files took about eight months of review, which is why letters are only now going out for an intrusion that ended in early February.
What the review found in the stolen files
According to the notice, the exposed information includes:
- names and contact information
- driver’s license numbers and other government ID numbers
- dates of birth
- hearing and other medical information, along with dates of service
- health insurance information
For some individuals, Social Security numbers and financial information were also taken.
Still unanswered
SecurityWeek said it had asked Amplifon for more detail and confirmation of the impact and had not yet received a reply. The public reporting does not say how the attackers got in, who was behind the intrusion, or whether a ransom demand was involved.
What this means for your company
Two points stand out for small and mid-size businesses. First, if you handle any health, insurance or ID data (and many employers, clinics, dental and optical practices, and benefits brokers do), assume a breach will be judged by how fast you can say whose data was in the files. Knowing where sensitive records live, keeping fewer copies of them and labeling what each system holds turns an eight-month review into a much shorter one. Second, a two-to-three-week window of file copying is long enough for outbound-data monitoring to notice. Make sure someone actually reviews alerts for large or unusual transfers. If your staff or family receive an Amplifon notice, enroll in any monitoring offered, consider a credit freeze, and treat calls or emails that mention hearing appointments or insurance with extra suspicion.
Wondering how long it would take your team to identify exactly whose data was exposed after an incident? We can map where your sensitive records live and tighten monitoring around them. Reach out to Layer 7 Data Solutions to discuss how we’ve helped companies similar to yours.
About The Author
