Hearing care company Amplifon has disclosed a data breach affecting more than 1.3 million people, exposing Social Security numbers, medical information and health insurance details. According to a report the company filed with the Texas Attorney General, the breach affected 1,332,826 people, including 85,804 in Texas. Amplifon began notifying affected individuals on 5 November, and also reported the incident to the Vermont Attorney General, listing 1,027 residents there.

The breach ran from 18 January to 8 February 2026, but Amplifon says it did not discover the intrusion until 6 October, about eight months after it ended. The company has not publicly explained how attackers got in or why the breach went unnoticed for so long. Amplifon (USA), Inc., based in Minneapolis, is the US arm of Amplifon S.p.A., a hearing care company headquartered in Milan, Italy.

What information was exposed

The Texas filing lists names, addresses, dates of birth and Social Security numbers among the exposed data. The Vermont notice adds driving licence or other state identification numbers, hearing and medical information, medical record numbers, dates of service, health information, health insurance ID numbers and financial information. Not every affected person had every item exposed, and the exact details differ from person to person. Amplifon is notifying people by US mail and on its website. People who receive a letter should watch for identity theft and consider placing a fraud alert or credit freeze, since Social Security numbers and medical records are among the most valuable details criminals can steal.