Amplifon Breach Exposes Social Security and Medical Data

Amplifon says attackers stole sensitive information belonging to thousands of its U.S. customers, including Social Security numbers and medical data. Anyone who receives a breach notice should act quickly because the exposed information could be used for identity theft, financial fraud or convincing scams.

What happened

Amplifon discovered suspicious activity on February 11, according to The Record. Its investigation found that attackers had access to company files from January 18 through February 8.

The stolen information includes names, Social Security numbers, driver’s license or state identification details, medical information, health insurance data and financial information. The source does not say that every affected customer had every type of information exposed, so recipients should read their individual notice carefully.

Amplifon has filed breach notices with regulators in Texas, Vermont and California. It reported 85,804 affected people to Texas and 1,027 to Vermont. Some law firms have claimed that more than 1.3 million people were affected, but Amplifon had not confirmed that figure when The Record published its report.

No hacking group had publicly claimed responsibility as of November 9. Amplifon also has not disclosed in the provided report exactly how attackers entered its systems or whether the stolen information has been misused.

Who is affected

The incident concerns U.S. customers of Amplifon, a company that connects patients with hearing-aid providers, hearing tests and related services. People who used Amplifon or an affiliated hearing-care service should watch their mail and email for an official notice.

A notice should identify which categories of personal information were involved for that recipient. Be cautious with unexpected calls, texts or emails that mention hearing aids, insurance claims or medical appointments. Stolen personal details can make a fraudulent message sound credible.

What to do now

1. Read the notice and list the exposed fields. Confirm whether your Social Security number, identification, financial, insurance or medical information was included. Use Amplifon’s U.S. website or a phone number from your existing paperwork rather than a link in an unexpected message.

2. Freeze your credit if your Social Security number was exposed. Visit the official websites of Equifax, Experian and TransUnion and place a freeze with each bureau. A freeze can make it harder for someone to open a new credit account in your name.

3. Review your credit reports and financial accounts. Look for unfamiliar accounts, credit checks, charges or address changes. Report anything suspicious to the relevant bank or lender immediately.

4. Check health insurance statements. Review explanations of benefits and your insurer’s online claims history for appointments, equipment or services you do not recognize. Contact the insurer using the number on your insurance card if something looks wrong.

5. Protect exposed identification. If your driver’s license or state ID was involved, contact your state motor vehicle agency and ask what fraud protections or replacement steps it recommends.

6. Treat follow-up messages as potential scams. Do not provide passwords, verification codes, payment or additional medical details to an unsolicited caller. Independently contact Amplifon, your provider or insurer through a known official number.