When a hearing aid app suddenly stops working, it can be more than a minor inconvenience. For someone who uses that app to adjust volume, select listening programs, or manage difficult environments, losing access can affect everyday communication.
That became a reality for some hearing aid users in late October 2026, when a cybersecurity incident involving WS Audiology disrupted services associated with Widex, Signia, and other hearing aid brands.
At approximately the same time, news about critical vulnerabilities in widely used internet software added to wider concerns about cybersecurity. The headlines can be alarming. But a hacked business system, a hearing aid app outage, and a hacked hearing aid are not the same thing.
What happened to Widex and Signia?
On October 26, WS Audiology (WSA), parent company of Widex and Signia, confirmed a cybersecurity incident involving unauthorized access to its customer relationship management environment and certain operational systems. The company said it temporarily restricted access to some systems, engaged third-party forensic experts, and began an investigation.
Disruptions were reported across several consumer apps and professional services. According to an October 29 service update relaying WSA Benelux information:
- Widex MOMENT, Widex MAGNIFY, and Coselgi MOJO apps remained unavailable.
- The Widex Allure app was functioning normally.
- Widex Compass Cloud, used by hearing care professionals to program and adjust Widex Allure hearing aids, had been restored.
- Signia and Audio Service experienced interruptions affecting remote-care and certain assistant functions, while basic app controls remained available.
Not every product was affected in the same way. As of October 30, the latest detailed service update reviewed by Hearing Is did not confirm full restoration. Patients should check their manufacturer's current notices and contact their hearing care provider rather than assume that an older status report still applies.
Were people's hearing aids actually hacked?
There is no verified public evidence that attackers remotely took control of patients' hearing aids during this incident.
A hearing aid is a medical device with its own hardware and software. Its companion smartphone app may provide additional controls, while certain app functions rely on outside systems or internet connectivity. If those supporting systems become unavailable, the app may fail even when the hearing aids themselves have not been compromised.
Many hearing aids continue to amplify sound using their existing settings without an active app connection. Some also offer buttons or phone-based controls. The functions available vary by model, and losing an important adjustment can still create a genuine accessibility problem.
An app failing to connect is not evidence, by itself, that someone has accessed the hearing aid's microphone or gained control of the device.
What about patient and medical information?
This is one of the most important unanswered questions. WSA confirmed unauthorized access to its CRM environment and some operational systems, but its October 26 public statement did not establish the full scope of any exposure involving individual patients.
It would therefore be inaccurate to claim that everyone's medical information has been stolen. It would also be premature to guarantee that no sensitive information was accessed. A continuing forensic investigation may establish further facts.
The current incident should not be confused with a separate 2024 breach involving WSA's Bloomhearing retail systems in Australia and New Zealand. In a September 2024 update, WSA acknowledged that attackers had temporarily accessed personal data involving patients and employees. That earlier event does not establish what happened in October 2026.
Is the hearing healthcare industry being targeted?
Healthcare organizations face cybersecurity risks, and hearing healthcare is not exempt. Earlier in 2026, Texas Hearing Institute, a pediatric hearing and audiology organization, reported an incident involving information associated with nearly 30,000 current and former patients. Reporting on that incident describes unauthorized access to network files and possible exposure of sensitive information.
That case is distinct from the WSA service disruption: one involved patient information held by a healthcare provider, while the other included interruption of a manufacturer's digital services.
October 2026 also brought disclosure of serious vulnerabilities in PHP, the software used to run many websites and web applications. These vulnerabilities, commonly called PHP2Shell, are important for web hosting and application security. However, there is no publicly established connection between PHP2Shell and the WSA attack. A coincidence in timing is not proof of a shared cause.
For audiology and ENT practices, cybersecurity also involves appointment systems, electronic health records, patient messaging, websites, and manufacturer-supported programming tools. Protecting these systems is part of maintaining access to care.
What should patients believe, and what should they question?
“My hearing aid app stopped working, so my hearing aids must have been hacked.”
Not established. An outage can prevent an app from accessing its supporting services without an attacker accessing the hearing aids.
“Hackers can now listen through everyone's hearing aids.”
There is no verified evidence this happened in the WSA incident. The company's public disclosure does not show that hearing aid microphones were used for surveillance.
“My private medical information has definitely been stolen.”
Not established for individual patients in the October 2026 incident. WSA confirmed access to certain business systems, but the scope of information potentially affected had not been fully disclosed in the public statement reviewed.
“If the app does not work, the hearing aids are useless.”
Not necessarily. Many devices continue functioning with their current programming. But patients may lose access to important personalized controls and may need assistance from their hearing care provider.
“Every hearing aid brand has been affected.”
No. This specific service disruption involved particular WSA brands, apps, and services. It is not evidence of a compromise involving all manufacturers.
What can patients do right now?
- Confirm your specific product and app. An outage affecting one model does not automatically affect another. Review the manufacturer's official support information.
- Avoid unnecessary app deletion or unpairing. Reinstalling an app cannot repair an unavailable manufacturer server and may introduce additional setup problems.
- Check alternative controls. The Widex app compatibility guide lists TONELINK for some models. It may offer basic volume and program controls, but it is not compatible with every hearing aid and does not duplicate every feature.
- Check supported phone controls. Compatible Made for iPhone hearing aids may have controls under Settings, Accessibility, Hearing Devices. See Apple's instructions. Functions depend on the phone and hearing aid model.
- Contact your audiologist or hearing care professional. Ask for help if a setting is inaccessible, communication is difficult, or you cannot determine whether the problem is an app outage or a device issue.
- Be cautious about unsolicited “repair” messages. Do not enter your password, payment information, or personal health details on unfamiliar sites promising to restore an app. Verify instructions through official channels.
- Respond to verified breach notices. If you later receive a notice that your information was affected, follow its specific instructions and consider the identity-protection steps appropriate to the information involved.
A bigger question: Should essential hearing aid controls depend on the internet?
Modern hearing aids have benefited from connectivity. Smartphone apps can make it easier to personalize listening, use remote care, and manage features without visiting a clinic. These are meaningful advances.
But the outage raises a practical design question: Which essential functions should remain available when an internet connection or manufacturer's service fails?
When someone cannot change a listening program or adjust volume because a remote system is unavailable, the consequences may go beyond a technical inconvenience. Communication at work, at school, or with family can be affected.
That does not mean connected hearing aids are inherently unsafe. It means manufacturers and clinicians should give reliability, privacy, and continuity of care the same attention as new features and software innovation.
Your hearing care professional remains an important resource
Audiologists and other qualified hearing care professionals can help distinguish software problems from device problems, review model-specific alternatives, and make appropriate adjustments when systems permit.
Patients should not install unofficial firmware, attempt unauthorized modifications, or change clinical programming based on unverified online instructions. Hearing aids require appropriate fitting, verification, and follow-up care.
The bottom line
WS Audiology confirmed unauthorized access to certain business systems, and multiple hearing aid apps and professional services experienced interruptions. Some functions had recovered by October 29, while the full scope of the incident remained under investigation.
What has not been established is that attackers remotely controlled patients' hearing aids, listened through their microphones, or stole every user's medical information.
Patients should rely on current manufacturer notices, use supported alternative controls where available, and stay in contact with their hearing care professionals. The broader lesson is that hearing healthcare must protect both patient information and dependable access to essential hearing functions.
Hearing Is informed. Hearing Is connected. Hearing Is secure.
Editorial update: Information reviewed through October 30, 2026. Service restoration and cybersecurity investigations are ongoing and may change the known facts. Hearing Is distinguishes verified findings from speculation and will update this coverage as warranted.
Sources: WS Audiology, October 26 statement; WSA Benelux service details reported October 29; WS Audiology, September 2024 breach update; Texas Hearing Institute incident reporting; Widex app compatibility; Apple hearing device controls.
Medical disclaimer: This article provides general education and is not individualized medical or cybersecurity advice. Patients experiencing hearing aid problems should consult a qualified hearing care professional.
← Back to News & Insights