{
  "id": "amplifon-americas-data",
  "url": "https://ohshit.app/incidents/amplifon-americas-data/",
  "title": "Amplifon Americas confirms file theft, with 1,332,826 people listed in its Texas filing",
  "level": 4,
  "level_name": "septic-tank-blew",
  "date": "2026-11-05",
  "date_is_approximate": false,
  "updated": null,
  "tags": [
    "Amplifon",
    "healthcare",
    "data breach"
  ],
  "ecosystems": [],
  "summary": "Amplifon Americas confirms that an unauthorized party obtained files from its network. The Texas filing lists 1,332,826 people. The company says hearing, medical and insurance data may be involved, and financial data or Social Security numbers may be involved for a limited group.",
  "splash": "People whose personal or hearing-care records were held on the affected Amplifon Americas systems.",
  "wipe": "Verify mailed notices, review insurance claims and statements, and enroll in monitoring if your letter offers it.",
  "in_the_wild": "yes",
  "source_exception": null,
  "cves": [],
  "fixed": [],
  "checklist": [
    {
      "title": "Verify your notice and ask about the affected fields",
      "hint": "Open Amplifon’s official incident page directly or call its incident line at 844-971-8634 on weekdays from 08:00 to 17:30 Central time, excluding major U.S. holidays. Amplifon says it will mail notices to potentially affected people for whom it has valid addresses."
    },
    {
      "title": "Check for unfamiliar insurance claims or charges",
      "hint": "Review explanations of benefits, account statements and service dates. Report unfamiliar claims to the insurer, and unfamiliar transactions to the institution holding the account. Keep the notice and any suspicious records."
    },
    {
      "title": "Use the monitoring offer if eligible",
      "hint": "Certain recipients, including those whose financial information or Social Security number was affected, are eligible for 24 months of free monitoring and identity protection. Follow the enrollment instructions in your verified letter. If a Social Security number was involved, consider placing a credit freeze with all three nationwide credit bureaus."
    }
  ],
  "sources": [
    {
      "name": "Amplifon Americas security incident notice",
      "url": "https://www.amplifonusa.com/legal-and-privacy/amplifon-americas-security-incident",
      "says": "Confirms file acquisition, detection, data review, possible fields, mitigation, mailing plans, monitoring and the incident hotline.",
      "primary": true
    },
    {
      "name": "Vermont Attorney General security breach register",
      "url": "https://ago.vermont.gov/categories/security-breach-notices?page=1",
      "says": "November 5 entry lists 1,027 Vermont residents and Social Security numbers and health records.",
      "primary": true
    },
    {
      "name": "Texas Attorney General public breach register",
      "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage",
      "says": "November 6 public record BR-0005495 lists 1,332,826 people overall and 85,804 in Texas.",
      "primary": true
    }
  ],
  "headline": null,
  "one_liner": null,
  "in_the_wild_note": "Amplifon confirms an unauthorized party obtained files from some of its systems.",
  "mitigation": null,
  "timeline": [
    {
      "date": "Jan 18–Feb 8, 2026",
      "title": "Unauthorized party obtains files",
      "body": "The company investigation identifies this window."
    },
    {
      "date": "Feb 11, 2026",
      "title": "Amplifon detects suspicious activity",
      "body": "It begins investigating with external experts, notifies law enforcement and says it promptly contains the intrusion."
    },
    {
      "date": "Oct 6, 2026",
      "title": "Data review identifies potentially affected personal information",
      "body": "Texas uses October 6 as its discovery date. Amplifon’s notice separates this review milestone from the February detection."
    },
    {
      "date": "Nov 5, 2026",
      "title": "Vermont publishes Amplifon’s filing",
      "body": "It lists 1,027 Vermont residents and identifies Social Security numbers and health records."
    },
    {
      "date": "Nov 6, 2026",
      "title": "Texas posts the overall count",
      "body": "Amplifon USA’s filing BR-0005495 lists 1,332,826 people overall and 85,804 in Texas."
    }
  ],
  "body_markdown": "Amplifon says it disabled affected accounts and increased monitoring. Its investigation found files had been obtained from certain systems. Depending on the person, the records may contain names, contact details, dates of birth, driver’s license or other government identifiers, hearing and medical information, medical record numbers, dates of service, and health insurance identifiers or other insurance information. Financial data and Social Security numbers may be involved for a limited group. The state counts are parts of the overall total.\n\nAmplifon reports that it is unaware of fraudulent use. The public notice gives no initial access mechanism and no field-by-field totals."
}