Breach · 3 min read
Amplifon Americas: personal and health details of about 1.33 million people taken
Amplifon Americas says attackers copied files from January 18 to February 8, 2026. A Texas AG filing lists about 1.33 million people; notices reached regulators in November.
Amplifon Americas, the U.S. arm of the Italian hearing-care company Amplifon, has disclosed a breach in which attackers copied files from internal systems between January 18 and February 8, 2026. A Texas Attorney General filing lists 1,332,826 people nationwide. SecurityWeek reported the disclosure on November 9. The company says it contained the incident and has not seen fraudulent use of the data so far.
What happened
According to Amplifon’s notice as summarized by SecurityWeek and the Texas AG record compiled by BreachTally, attackers got into Amplifon Americas’ internal systems in January 2026 and copied files from certain systems through February 8. The firm says it contained the incident quickly, then spent months reviewing what was taken before it could say personal information was affected. The Texas filing is dated November 6, 2026; the filing lists discovery on October 6, 2026. Notices went out by mail and via a posted company page.
What may have been exposed
Combinations vary by person. Across the affected files, Amplifon says the following may be included:
- Name and contact details
- Driver’s licence and other government ID numbers (including passport or state ID)
- Date of birth
- Hearing and other medical information, dates of service and health-insurance information
- For some people, Social Security numbers and financial / bank account details
The Texas filing names Amplifon (USA), Inc., lists 85,804 Texas residents in that state’s copy of the notice, and classifies the entity as a healthcare medical provider.
What this means for you
If you were an Amplifon Americas patient or customer, a letter or posted notice may be how you hear. Name, date of birth and government ID (and for some people an SSN) are enough for identity-theft attempts. Health and insurance details also support convincing “clinic callback” or benefits scams.
What you can do
- Read any Amplifon or clinic letter carefully and use only contact details printed on that letter or on Amplifon’s own site, typed by you.
- Consider a free U.S. credit freeze at each of the three bureaus if an SSN may be in your set; freezes are free and reversible.
- Watch Explanation of Benefits and bank statements for unfamiliar hearing or medical charges.
- Treat unexpected Amplifon, insurance or “records update” calls as suspect. Do not give an SSN or card number to someone who cold-calls you about this incident.
- See how scammers use leaked data to make phishing personal and what to do after a data breach for a short checklist (the Canada guide’s steps still help on monitoring and phishing).
How Frame helps
Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Frame can also look up your verified emails in Have I Been Pwned’s breach database. Frame never collects or stores the leaked records themselves.
Related coverage
- Frontline Education school systems breach: another large U.S. notice wave with new state-AG totals this week.
- How scammers use leaked data to make phishing personal.
Sources
- SecurityWeek, Amplifon Americas Data Breach Impacts 1.3 Million, November 9, 2026
- BreachTally (Texas Attorney General filing), Amplifon (USA), Inc. data breach notification, filed November 6, 2026 (1,332,826 people nationwide; 85,804 Texas residents)
More stories
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.