Quick Answer
Amplifon says an unauthorized third party obtained files from certain systems between January 18 and February 8, 2026. The company says health and identity data may be affected, and a Texas filing lists 1,332,826 people nationwide. Check mailed notices, enroll in any offered monitoring, and protect accounts that use exposed identity details.
Key Takeaways
- Amplifon detected suspicious activity on certain network systems on February 11, 2026.
- An unauthorized third party obtained files between January 18 and February 8, 2026.
- Potentially affected data includes health information, government IDs, and insurance information.
- A Texas filing lists 1,332,826 affected people nationwide, including 85,804 Texans.
- Amplifon says it will offer certain affected individuals 24 months of free credit monitoring and identity protection.
What happened in the Amplifon data breach?
The Amplifon data breach involved an unauthorized third party obtaining files from certain company systems between January 18 and February 8, 2026. Amplifon Americas says it detected suspicious activity on certain network systems on February 11, launched an investigation with external cybersecurity experts, notified law enforcement, and contained the incident.
Amplifon completed its review on October 6, 2026, and determined that certain personal information may have been affected. The gap between detection and the completed review matters because organizations often need time to identify which systems and files were involved, determine whose data appeared in those files, and locate valid mailing addresses for notification. Amplifon’s security-incident notice provides the company’s account of the investigation and notification process.
Amplifon says it is not aware of fraudulent use of personal information resulting from the incident. That statement does not mean affected people should ignore a notice, because data involving medical care, government identification, and health insurance can remain useful for account fraud or identity misuse after an incident becomes public.
The practical response is to treat any mailed notice from Amplifon as important, confirm whether it names the affected information categories, and preserve a copy for your records. Avoid sharing notice details through unsolicited calls, emails, or text messages that claim to offer breach assistance.
What information may have been exposed?
The Amplifon data breach may involve identity information, medical information, and health-insurance information. Amplifon says the potentially affected categories include names, contact information, dates of birth, driver’s-license or state-ID numbers, other government IDs, hearing and medical information, medical-record numbers, dates of service, and other health information.
Amplifon also says health-insurance IDs and related insurance information may have been affected. For a limited number of people, the company says financial information or Social Security numbers may also have been involved. The exact information varies by person, so an affected customer should rely on the individual notice rather than assume every category applies.
| Potential data category | Examples named by Amplifon | Why affected people should review notices |
|---|---|---|
| Identity information | Name, contact details, date of birth, driver’s license, state ID, other government IDs | Identity details can require closer review of accounts and communications that request personal verification. |
| Health information | Hearing information, medical information, medical-record number, date of service | Health-related details are sensitive and may help make a fraudulent message appear more credible. |
| Insurance information | Health-insurance IDs and related information | Insurance information can require attention to unexpected claims, messages, or account activity. |
| Limited additional information | Financial information or Social Security numbers for a limited number of people | People named in this category should use the protection services offered in their notice. |
The most important point is that a hearing-care provider can hold more than appointment information. Hearing and medical records can reveal sensitive details about care, while identification and insurance records can create a broader privacy concern. Similar healthcare-related incidents show why a large-scale personal-data exposure deserves attention even before fraudulent activity is confirmed.
How many people may be affected by the Amplifon data breach?
The Amplifon data breach may affect 1,332,826 people nationwide, based on a Texas attorney general filing dated November 6, 2026. The filing reportedly includes 85,804 Texans. That total is the clearest public nationwide estimate currently identified in the available state filing information.
The number should be read as a reported filing total, not as a description of the exact data categories involved for every person. A person can be included in a breach notification count even when the information associated with that individual differs from the records associated with another affected person.
SecurityWeek’s reporting on the Texas filing identifies the 1,332,826 nationwide figure and the 85,804 Texas figure. Those numbers make the incident significant because it extends beyond a single clinic or local market and may involve hearing-care customers across the United States.
State filing totals can also appear at different times as organizations submit notices in individual jurisdictions. The practical action is to watch for a direct notice if you received hearing care through Amplifon or an affiliated location, particularly if the provider collected identification, insurance, or medical information during registration.
Why does the Amplifon data breach create privacy risks?
The Amplifon data breach creates a meaningful privacy risk because the potentially affected records combine contact details with health, insurance, and identification information. A name and email address alone can support unwanted messages, but those details become more sensitive when paired with a date of birth, medical-record number, government ID, or health-insurance information.
The risk is not limited to a single type of misuse. A person who has access to several categories of personal information can create more convincing messages that appear to come from a healthcare provider, insurer, bank, or government office. The available information does not establish that any particular affected customer has experienced fraud, and Amplifon says it is not aware of fraudulent use resulting from the incident.
Health information deserves added caution because people may not expect it to appear in a general identity-theft scam. Be skeptical of any unexpected request for insurance numbers, medical-record information, payment details, or account passwords, even if the message mentions a recent hearing appointment. Consumers facing similar account-security concerns should also recognize that compromised credentials can create separate risks, as shown in reporting on an encrypted password-vault breach.
The safest approach is to verify unexpected communications through a phone number or website you already know is legitimate. Do not use a link, callback number, or attachment supplied in an unsolicited message claiming to be about the Amplifon incident.
What should affected Amplifon customers do now?
Affected Amplifon customers should read the mailed notice, determine which data categories apply, and enroll in the offered protection services before the stated deadline. Amplifon says it will mail notifications to potentially affected people with valid addresses and provide certain individuals with 24 months of free credit monitoring and identity-protection services.
Take the following 5 steps if you receive a notice:
- Read the notice carefully and identify the categories of information that Amplifon says may have been affected.
- Save a copy of the notice in a secure location, including any enrollment code or contact information for offered services.
- Enroll in the offered protection services if your notice includes access to credit monitoring or identity protection.
- Review relevant accounts for unexpected activity, including insurance portals, payment accounts, and services connected to the exposed contact details.
- Verify breach-related messages independently by using trusted contact information rather than replying to an unexpected email, call, or text.
Amplifon’s notice says only certain individuals will receive the 24-month offer, so customers should not assume eligibility without checking their own letter. The company says it is not aware of fraudulent use connected to the incident, but monitoring remains sensible because the potentially affected data includes multiple forms of sensitive personal information.
Stop and contact Amplifon through a verified channel if your notice is missing, unclear, or appears inconsistent with your relationship with the company. Contact the relevant bank, insurer, or government agency directly if you identify activity that you do not recognize.
How will Amplifon notify affected people?
Amplifon says it will notify potentially affected people by mail when it has a valid address. A mailed notice should explain the incident, describe the information that may have been affected for the recipient, and state whether that person is eligible for the company’s credit-monitoring and identity-protection offer.
Mail-based notification matters because a message that arrives by email or text may be difficult to distinguish from a scam. A legitimate breach notice can still lead to imitation messages, particularly when public reporting identifies a large number of potentially affected people. Do not provide a Social Security number, password, financial-account number, or insurance identifier to an unsolicited caller claiming to help with the breach.
Amplifon filed notices in Texas, Vermont, and California, according to reporting published November 9. The Vermont filing reportedly includes 1,027 Vermont residents. The Record’s review of the state filings describes the reported notification activity and the incident timeline.
The practical response is to check physical mail at the address Amplifon has on file and to update your address through a trusted customer-service channel if you believe it is outdated. Customers should not wait for a social-media post or an unexpected message before taking routine account-security precautions.
What is the timeline of the Amplifon security incident?
The Amplifon security incident began with unauthorized access between January 18 and February 8, 2026, and public notification activity followed after the company completed its review in October. The sequence shows why breach notices can arrive months after suspicious activity first appears on a company network.
| Date | Reported event | Why the date matters |
|---|---|---|
| January 18 to February 8, 2026 | An unauthorized third party obtained files from certain Amplifon systems. | This is the reported access window. |
| February 11, 2026 | Amplifon detected suspicious activity, began an investigation, notified law enforcement, and contained the incident. | This is when the company says it identified and responded to the activity. |
| October 6, 2026 | Amplifon completed its review and determined certain personal information may have been affected. | This review supported later individual notifications. |
| November 6 to November 9, 2026 | State filing information and reporting identified the nationwide total and notices in several states. | This is when the scope became more visible publicly. |
The timeline does not establish when every affected person will receive mail. Notification timing can depend on whether the company has a valid address and on the requirements that apply to a resident’s state. The practical action is to retain any correspondence and use the details in your individual notice, because it is more relevant than a statewide count.
FAQ
Did Amplifon have a data breach?
Yes, Amplifon says an unauthorized third party obtained files from certain systems between January 18 and February 8, 2026. The company says it detected suspicious activity on February 11, investigated the incident, and later determined that certain personal information may have been affected.
What information was exposed in the Amplifon data breach?
The potentially affected information includes identity, health, and insurance data. Amplifon lists names, contact information, dates of birth, government IDs, hearing and medical information, medical-record numbers, dates of service, and health-insurance information, while financial information or Social Security numbers may affect a limited number of people.
How many people were affected by the Amplifon data breach?
A Texas filing lists 1,332,826 people affected nationwide, including 85,804 Texans. The reported total describes the scale of the notification event, but the specific information involved can differ for each affected person.
Is Amplifon offering free credit monitoring?
Yes, Amplifon says certain affected individuals will receive 24 months of free credit monitoring and identity-protection services. Check your mailed notice because the company says the offer applies to certain individuals, not necessarily every person who received care.
What should I do if I receive an Amplifon breach notice?
Read the Amplifon notice, preserve a copy, and enroll in any protection services offered before the stated deadline. Review relevant accounts for unexpected activity and independently verify any call, email, or text that asks for personal information in connection with the incident.