Hearing Aid Provider Amplifon Confirms Breach Exposing Health and Identity Data of Thousands

International hearing care company Amplifon has confirmed that thousands of its US customers had sensitive personal and medical information stolen in a cyberattack. The Milan-based company connects patients with hearing aid providers and offers hearing tests and related services. It has notified state regulators, reporting 85,804 affected people in Texas and 1,027 in Vermont, and has also filed notices in California.

According to Amplifon's breach notice, it first noticed suspicious activity on 11 February. An investigation later found the attackers had access to company files between 18 January and 8 February. The stolen data includes names, driver's licences, state IDs, medical information, health insurance details and financial information. No hacking group has claimed responsibility as of Monday. Several class action law firms put the total number of victims at 1,332,826, but Amplifon did not respond to requests to confirm that figure.

The incident is part of a wider pattern. The Record reports that the healthcare sector, particularly companies making wearable devices, has faced an unprecedented level of attack in 2026. Medical device maker iRhythm recently said 8,179,772 people were affected by a cyberattack on its systems, and several other device makers have also dealt with incidents that exposed medical data and caused supply chain issues.