Amplifon Americas breach steals medical and personal data of 1.3 million people

What happened

Hackers breached the internal systems of Amplifon Americas, the Minneapolis-based division of the Italian hearing healthcare provider, in January 2026. The attackers copied files from specific systems between January 18 and February 8, 2026.

While the company contained the incident immediately, it took eight months of investigation to determine the scope of the theft. A filing with the Texas Attorney General's Office indicates that 1,332,826 people across the United States were affected. The stolen data includes names, contact information, dates of birth, driver's license numbers, and other government IDs. For some individuals, the breach also included Social Security numbers and financial information. Attackers accessed hearing and medical records, including dates of service and health insurance details.

Why it matters

This incident highlights the danger of delayed detection and the long-term fallout of a slow forensic review. Because it took eight months to confirm what was stolen, the window for proactive defense was lost. The theft of highly sensitive data, such as medical history, government IDs, and Social Security numbers, provides enough information for sophisticated identity theft and targeted phishing attacks.

Who is affected

• Amplifon Americas customers and members in the United States.

What to do now

1. Monitor credit reports and financial statements for any unauthorized transactions or activity.
2. Watch for phishing attempts that use specific personal or medical details to gain trust.
3. Review bank and health insurance accounts for suspicious changes or transactions.

What we don't know yet

• The specific method or vulnerability used to gain access to the internal systems.
• The identity or attribution of the threat actor.
• The exact number of individuals whose Social Security or financial data was stolen.