Tech Radar reports that Amplifon Americas has disclosed a significant cyberattack resulting in the unauthorized exposure of sensitive personal, insurance and healthcare-related information.
The company identified that unauthorized actors gained access to its servers between Jan. 18, 2026, and Feb. 8, 2026. While the specific entry method remains undisclosed, the company disabled impacted accounts, suggesting a potential compromise of employee credentials. The investigation concluded on Oct. 6, 2026, confirming the theft of names, dates of birth, medical records, insurance identifiers and government-issued identification numbers. For a limited number of individuals, Social Security numbers and financial data were also exposed. Although the company has not confirmed the total number of victims, reports suggest the breach could affect more than 1,000,000 people. Amplifon Americas is currently offering 24 months of free identity theft protection and credit monitoring services to those affected. No hacking group has claimed responsibility for the incident. This breach highlights the ongoing vulnerability of healthcare organizations, which remain prime targets due to the permanent nature of the sensitive medical and personal data they maintain. The company advises customers to remain vigilant against phishing attempts and to monitor their account statements for suspicious activity.
Source: Tech Radar
