Amplifon, a global hearing healthcare provider headquartered in Milan, Italy, has confirmed that a cyberattack resulted in the unauthorized access of sensitive personal and medical data belonging to thousands of its U.S. customers. The company, which operates across 28 countries, began notifying state regulators of the incident in early November 2026. According to filings submitted to authorities in Texas and Vermont, the breach impacted at least 85,804 individuals in Texas and 1,027 in Vermont, with additional notifications filed in California.
The company’s internal investigation determined that unauthorized actors gained access to its systems between January 18 and February 8, 2026. Amplifon first identified suspicious activity on its network on February 11, 2026. While the company has officially acknowledged the breach, it has not publicly addressed estimates provided by various class-action law firms, which suggest the total number of affected individuals could be as high as 1,332,826.
The scope of the compromised information is extensive. Amplifon confirmed that the stolen files contained names, driver’s license numbers, state identification numbers, financial information, health insurance details, and medical records. In some instances, the breach also involved the exposure of Social Security numbers. The company is currently in the process of notifying those impacted by the incident.
As of the second week of November 2026, no specific threat actor or hacking collective has claimed responsibility for the intrusion. The company has not provided further technical details regarding the specific entry point or the methods used by the attackers to bypass its security measures.
This incident occurs against a backdrop of increasing cyber activity targeting the healthcare and medical device sectors throughout 2026. The industry has seen a surge in large-scale data breaches, with other major medical device manufacturers reporting similar compromises of sensitive patient data. For instance, iRhythm recently disclosed a breach affecting over 8 million people, and numerous other firms, including Medtronic, Boston Scientific, and Stryker, have faced significant cybersecurity challenges this year.
Amplifon, which was established in 1950 to assist veterans with hearing loss, has since grown into a multinational entity that provides hearing tests and specialized auditory devices. The company continues to coordinate with state regulators as it manages the fallout from the February incident. Customers are encouraged to monitor their financial statements and credit reports for signs of unauthorized activity, as the nature of the stolen data poses a long-term risk for identity theft and fraud.
