Amplifon Data Breach Investigation
Amplifon (USA), Inc., a Minnesota-based healthcare company focused on hearing care services, was reported in state regulatory filing information as experiencing a network incident that may have affected personal, financial, and health information. The reported population is approximately 1.33 million individuals, although each person’s affected data may differ. Strauss Borrelli PLLC is investigating the incident and the rights of people who received notice or believe they may be affected. Readers may fill out the secure contact form on this page to ask whether they may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: Amplifon (USA), Inc. (Healthcare)
- Incident Type: Network security incident; the specific type was not stated in the available information
- Date of Incident: January 18, 2026, to February 8, 2026
- Discovery Date: Not provided in the available incident information
- Official Notice Date: Not provided in the available incident information
- Exposed Information: Names, Social Security numbers, dates of birth, contact information, driver’s license numbers, financial account numbers, medical record numbers, health records, and health insurance information may have been involved
- Affected Population: 1,332,826 individuals reported in state filing information
What Happened?
According to structured incident information associated with state attorney general filings in Vermont and Texas, Amplifon (USA), Inc. reported a security event involving information maintained on its network. Those records identify reported activity from January 18 through February 8, 2026, as well as a public listing date of November 5, 2026. The available materials do not provide a discovery date or a verifiable date on which individual notices were mailed.
The available information also does not identify the precise event type, intrusion method, or whether a third-party service provider was involved. The incident therefore should not be characterized as ransomware, malware, or a vendor compromise without further official findings. Because facts may be supplemented or clarified, affected individuals should rely on any notice addressed to them and Amplifon’s official incident page for details specific to their information.
What Information Was Exposed?
State filing information reports that the data potentially involved may include names, Social Security numbers, dates of birth, contact information, driver’s license numbers, financial account numbers, medical record numbers, health records, and health insurance information. The specific combination may differ from person to person, and the available information does not establish that every listed category was involved for every individual.
Because this is a healthcare-related incident, potentially affected people should watch for medical identity theft, fraudulent patient bills, unfamiliar insurance claims, prescription inquiries, and calls or messages seeking to “verify” health benefits. Financial and identity data could also be used in phishing attempts or applications for credit.
What Should You Do Next?
- Review the notice carefully: Preserve any letter or email that appears to come from Amplifon and compare its contact information with the company’s official website before responding. The notice may identify the particular data associated with you.
- Monitor healthcare activity: Examine insurance explanations of benefits, patient portal records, prescription histories, and medical bills. Contact the provider or insurer through a verified telephone number if you find care, equipment, or claims you do not recognize.
- Check financial and credit records: Review bank and credit card transactions and obtain credit reports from the federally authorized AnnualCreditReport.com website. Report unfamiliar accounts, inquiries, or charges promptly.
- Consider a fraud alert or credit freeze: A fraud alert asks creditors to take additional identity-verification steps. A credit freeze generally restricts access to your credit file and may make it harder for someone to open a new account in your name.
- Be cautious about healthcare scams: Do not provide personal information in response to unsolicited calls, texts, or emails about insurance verification, refunds, prescriptions, or identity monitoring. Navigate directly to a trusted website rather than selecting an unexpected link.
Your Legal Rights
People whose information was involved may have rights under state data-breach, privacy, consumer-protection, or other laws. The rights available may depend on where a person lives, the information involved, the adequacy and timing of notice, the security measures at issue, and whether the person experienced identity theft, fraudulent charges, lost time, or other harm.
Potential remedies are fact-specific and are not guaranteed. Affected individuals may wish to preserve their notice, receipts for protective expenses, correspondence with insurers or financial institutions, and records of suspicious activity. Consulting a data privacy attorney can help someone understand whether the reported facts may support a claim, but general information about this incident is not individualized legal advice.
Why Hire Strauss Borrelli PLLC?
The firm represents consumers in data privacy and cybersecurity matters and can evaluate incident notices, potentially affected information, and documented losses. An attorney can also explain applicable legal options, preservation steps, and filing deadlines. A confidential case review may help affected individuals understand their position without promising a particular outcome.
If you received a breach notification letter from Amplifon (USA), Inc.:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
