Amplifon, an Italian hearing aid and auditory services company, said thousands of its U.S. customers had their Social Security numbers and medical information stolen in a cyberattack in February.
The company began notifying state regulators of the breach last week. It told Texas officials that 85,804 people were affected, and it reported 1,027 people in Vermont. Amplifon also filed breach notices in California.
In a breach notice on its U.S. website, Amplifon said it first discovered suspicious activity on February 11. The investigation later found that hackers had access to company files between January 18 and February 8.
According to the report, the stolen data includes names, driver's licenses, state IDs, medical information, health insurance data and financial information.
No hacking group had claimed responsibility as of Monday.
Several class action law firms said the total number of victims is 1,332,826. Amplifon did not respond to requests to confirm that figure.