Amplifon Hearing Health Care has disclosed a data breach affecting more than 1.3 million people in the United States. The incident involved Amplifon Americas, the Minneapolis-based arm of the hearing care company.
According to the company's notice, hackers got into its internal systems in January 2026 and copied files between January 18 and February 8. Amplifon says it contained the incident and began an investigation, but reviewing the stolen files to find out whose information was involved took eight months.
The exposed information includes names, contact details, driver's license and other government ID numbers, dates of birth, hearing and medical information, dates of service, other health information and health insurance details. For some people, Social Security numbers and financial information were also taken. Amplifon says it is not aware of any fraudulent use of the data.
For medical, dental and other healthcare offices, this is a useful example of how much sensitive patient information can be taken in one incident, and how long it can take to figure out the full impact afterward. Knowing where patient data lives and who can access it makes both prevention and response much easier.
What you should do
- Make an inventory of where patient and customer data is stored, including file shares and old exports.
- Limit access to sensitive records to the staff who actually need it.
- Delete or archive data you no longer need to keep.
- Review your incident response plan so you know who to call and how to notify affected people.
- Watch for phishing emails or calls that mention this breach if you or your staff receive a notice.
Computech prepares these summaries with AI assistance, based on public news reports. See the original report for full details.
