Amplifon Americas, a U.S. hearing care provider, has disclosed a data breach that affects 1,332,826 people nationwide, according to a Texas Attorney General filing as summarized by BreachTally on Nov. 6, 2026.
Amplifon’s security incident notice says the exposed data includes names, dates of birth, government ID numbers, and health and insurance information, and that Social Security numbers or financial information were affected for a limited number of individuals. Amplifon has not publicly confirmed the total, and the company says it is not aware of any fraudulent use of the information.
How the Amplifon Data Breach Happened
An unauthorized third party obtained files from Amplifon’s systems between Jan. 18 and Feb. 8, 2026, according to the company’s notice. Amplifon says it detected suspicious activity on Feb. 11, 2026, notified law enforcement, and disabled impacted accounts.
The notice says a review of the affected data indicated on Oct. 6, 2026 that certain personal information may have been impacted. That is nearly eight months after detection, and the notice does not explain the timeline. Amplifon says it will notify people for whom it has a valid mailing address, and its Texas filing lists U.S. Mail and a website posting as the methods of notice.
Amplifon has not said how the attackers got in. As of Nov. 9, The Record reported that no hacking group had claimed responsibility. Amplifon also filed notices with state officials, including in Texas and Vermont. The Texas Attorney General’s breach report listing, published Nov. 6, 2026, shows 85,804 Texans affected.
What Information Was Exposed in the Amplifon Data Breach
What was exposed varies by person, and your notice letter lists which of your information was involved. Amplifon’s notice names these categories:
- Names and contact information
- Dates of birth
- Driver’s license, state ID, or other government-issued ID numbers
- Hearing or medical information, including medical record numbers, dates of service, and other health information
- Health insurance ID numbers and related information
According to Amplifon, Social Security numbers or financial information “may also have been impacted” for “a limited number of individuals.” The Vermont Attorney General’s breach notice listing for Amplifon names Social Security numbers and health records, and the Texas listing includes Social Security number information among the types affected.
What Can Someone Do With Your Social Security Number?
Criminals can use a Social Security number to try to open new credit accounts in your name, which a credit freeze blocks, or to file a tax return in your name, which the IRS Identity Protection PIN is designed to prevent. Health insurance and medical record details add a separate risk: medical identity theft, which happens when someone uses another person’s information to obtain medical care.
Amplifon says it is not aware of fraudulent use so far. The steps below apply whether or not any misuse has shown up.
What Should You Do If You Got an Amplifon Data Breach Notice?
Read the notice closely, confirm it is genuine, and note which of your information it says was involved. Amplifon’s Texas filing shows that notice was provided by U.S. Mail and a website posting, and the company’s notice says it will notify people for whom it has a valid mailing address.
- Check that the toll-free number on the letter matches (844) 971-8634, the number on Amplifon’s official notice page. Do not reply to unsolicited calls, texts, or emails about the breach.
- Note which categories of information the letter lists, especially Social Security number, financial, and medical information.
- Keep the letter and envelope, with the date you received them.
- If the letter offers credit monitoring, enroll through the instructions in the letter, not through links in unsolicited texts or emails.
If you used Amplifon hearing care services and did not get a letter, call the hotline on the notice page to ask whether your information was involved. The notice says Amplifon will notify people with a valid mailing address, so a missing letter does not by itself show that your information was not involved. The steps below apply either way.
Warning Signs That Your Information Is Being Misused
Signs of misuse tend to appear in your credit reports, your medical and insurance statements, and the messages you receive.
| Warning Sign | Why It Matters |
| An Explanation of Benefits for care you did not receive | The FTC lists this as a warning sign of medical identity theft. |
| A medical debt collection notice you do not recognize | The FTC advises checking credit reports for unfamiliar medical collections after a medical identity theft. |
| Accounts or credit inquiries you did not open | Someone may be using your identity details to seek new credit. |
| A call, text, or email about the breach that asks for your SSN, payment, or login details | Messages about a breach can be copied by scammers. Use the phone number on your letter or on Amplifon’s official notice page instead. |
How to Protect Yourself After the Amplifon Data Breach
Start by confirming what was exposed, then block new credit in your name and watch your accounts and statements.
- Read your notice letter and use official contact details. Note which categories of information it lists. Do not reply to unsolicited calls, texts, or emails about the breach. Contact Amplifon only at the number on your letter or the toll-free line, (844) 971-8634, on its official notice page.
- Enroll in the credit monitoring Amplifon offers, if your letter includes it. Amplifon says it is offering 24 months of free credit monitoring and identity protection services to certain individuals, including those whose SSN or financial information was affected.
- Freeze your credit at all three bureaus. A freeze blocks new credit accounts in your name. Details are in the next subsection.
- Request an IRS Identity Protection PIN. The IRS says this six-digit number prevents someone from filing a tax return with your SSN.
- Review statements and credit reports. Look for Explanations of Benefits for care you did not receive, and request your credit reports at AnnualCreditReport.com to check for accounts you do not recognize.
- Ask why a provider needs your SSN. McAfee’s guide to safeguarding your family against a medical data breach advises not to hand over an SSN automatically, even when a medical provider asks for it.
Should You Freeze Your Credit After the Amplifon Breach?
Yes, if your notice says your SSN or financial information was involved. The FTC says there is no cost to place or lift a freeze, and that while one is in place nobody can open a new credit account in your name, including you. A freeze does not close existing accounts.
Place the freeze separately at Equifax, Experian, and TransUnion. A free fraud alert, which lasts one year, is a lighter option, but unlike a freeze it does not block lenders from viewing your report.
What to Do If Your SSN or Medical Information Was Misused
If your notice says your SSN was involved, or you see signs of misuse, freeze your credit first, then work through these steps.
- Report identity theft at IdentityTheft.gov. The FTC directs people there to create a personal recovery plan, and the Social Security Administration says to report a stolen SSN to the FTC if you believe your identity was misused.
- Contact your bank or card issuer if your notice says financial information was involved, and ask about stopping or reversing charges you do not recognize.
- Dispute errors. If statements show care you did not receive, request records from each provider, insurer, and pharmacy involved and report errors in writing. The FTC says providers must respond within 30 days. Dispute unfamiliar accounts and medical collections with the credit bureaus.
- Keep records. Save your notice letter, call dates, reference numbers, and copies of anything you send.
McAfee’s identity theft recovery guide covers additional steps.
How to Report the Amplifon Data Breach and Related Fraud
- FTC: Report scams at ReportFraud.ftc.gov and identity theft at IdentityTheft.gov.
- FBI Internet Crime Complaint Center: Report phishing messages or other internet-enabled fraud at ic3.gov.
- Local police: File a report if you lost money or someone used your identity.
- Amplifon: Call the toll-free line on your notice letter with questions about your notice.
Amplifon disclosed the breach in early November 2026, and more details may emerge as the company and regulators release information. Whatever your letter says, the most important protective step is a credit freeze at Equifax, Experian, and TransUnion, because it blocks new accounts opened with exposed identity details.
FAQ
Was Amplifon hit by a data breach, and how many people were affected?
Yes. Amplifon says an unauthorized third party obtained files from its systems between Jan. 18 and Feb. 8, 2026, and that it detected suspicious activity on Feb. 11. BreachTally’s summary of the Texas filing lists 1,332,826 affected people nationwide, a total Amplifon has not publicly confirmed. The Texas Attorney General’s listing shows 85,804 Texans affected.
What information was exposed in the Amplifon data breach?
Amplifon’s notice lists names, contact information, dates of birth, driver’s license and other government ID numbers, health and medical information, and health insurance information. Social Security numbers or financial information were affected for a limited number of individuals, according to the company.
Why did it take Amplifon months to notify people?
Amplifon has not publicly explained the timeline. Its notice says a review of the affected data indicated on Oct. 6, 2026 that certain information may have been impacted, nearly eight months after the Feb. 11 detection.
Does Amplifon offer free credit monitoring, and should I still freeze my credit?
Amplifon says it is offering 24 months of free credit monitoring and identity protection services to certain individuals, including those whose SSN or financial information was affected. Monitoring and a freeze do different jobs: monitoring alerts you to activity, while a freeze blocks new accounts from being opened in your name.
The post Amplifon Data Breach Reportedly Affects 1.3 Million: How to Protect Your Personal Data appeared first on McAfee Blog.
