Widex A/S — 2 prefixes (MA-L)
Summary
- // what this is
- Widex A/S is registered to MAC prefix
40:4A:D4and 1 more in the IEEE OUI database. When a device's MAC address begins with40:4A:D4, that block was registered by Widex A/S — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- A Widex OUI on a globally-administered address identifies genuine Widex hearing-aid hardware or its companion accessories; the mapping of a specific prefix to a specific product model is not independently confirmed.
About this vendor.
A MAC address starting with 40:4A:D4 or 84:D4:C8 belongs to Widex A/S, a Danish hearing-aid manufacturer, and is typically seen on hearing-aid hardware or its Bluetooth-enabled companion accessories such as smartphone apps and TV/audio streamers.
Widex A/S was founded in 1956 by the Tøpholm and Westermann families and remained family-controlled for decades. Headquartered in Lynge, in Allerød Municipality, Denmark — the same address recorded on both IEEE OUI assignments — the company grew to roughly 3,800 employees selling hearing aids in about 100 countries, ranking as the world's sixth-largest hearing-aid maker before its 2019 merger.
Since March 2019, Widex has operated as part of WS Audiology A/S, formed by the merger of Sivantos and Widex, which remains its current corporate parent and brand owner.
Widex's product category (hearing aids and their companion Bluetooth/BLE accessories) is confirmed at the vendor level through the FDA's GUDID medical-device registry, which lists Widex A/S as manufacturer of record for marketed devices such as the CLEAR440 BTE. No source independently ties either specific prefix, 40:4A:D4 or 84:D4:C8, to a named product's radio chipset, so that mapping is a reasonable inference from Widex's product line rather than a confirmed fact for these exact blocks.
No CVE, security advisory, botnet association, or default-credential report is recorded against Widex hardware, firmware, or either prefix, as of an August 2026 search of NVD, CVE.org, and general web sources. Separately, WS Audiology — the corporate parent, headquartered in the same town — disclosed a ransomware attack first reported around July 2024, attributed to the BlackSuit group, affecting patient and employee data across several country subsidiaries; this is corporate IT history, not a device vulnerability.
- Device class
- Hearing aids (BTE/RIC/ITE) [Confirmed via FDA GUDID device-category listing] — accessgudid.nlm.nih.gov
- Also seen on
- Bluetooth/BLE companion apps and TV/audio streamers for Widex hearing aids [Likely, inferred from product line] — widex.com
- Company type
- Independent hearing-aid manufacturer, now a WS Audiology brand [Confirmed] — en.wikipedia.org/wiki/WS_Audiology
- Registered address
- Nymøllevej 6, Lynge, Allerød, DK-3540, Denmark (identical on both OUI blocks) [Confirmed] — the IEEE MA-L registry
- Security history (device)
- No CVE or advisory found as of an August 2026 search [Unknown, sourced negative] — NVD, CVE.org
- IEEE assignment
- 2 prefixes → Widex A/S, registered Lynge, Denmark [Confirmed] — the IEEE MA-L registry (assignments 404AD4, 84D4C8)
- Registry / block size
- MA-L (24-bit OUI); 2 dedicated IEEE prefixes, not a shared/sub-allocated base [Confirmed] — the IEEE MA-L registry
- HQ / country
- Nymøllevej 6, Lynge, Allerød, DK-3540, Denmark [Confirmed] — the IEEE MA-L registry
- Company status
- active, operating as a brand of WS Audiology A/S since the 2019 Sivantos–Widex merger [Confirmed] — https://en.wikipedia.org/wiki/WS_Audiology
- Device types
- hearing aids (BTE/RIC/ITE) and Bluetooth/BLE companion accessories [Confirmed] — https://accessgudid.nlm.nih.gov/devices/05706069581959
- Notable products
- Widex CLEAR440 BTE (FDA GUDID listing) [Confirmed] — https://accessgudid.nlm.nih.gov/devices/05706069581959
- Verified sample prefixes (both MA-L, Widex A/S)
- 40:4A:D4, 84:D4:C8 [Confirmed] — the IEEE MA-L registry
- Registration date
- Unknown — IEEE's public OUI data publishes no assignment/registration date; third-party "registered on" dates shown by mirror sites are database artifacts, not IEEE facts [Unknown] — the IEEE MA-L registry
- Related vendors
- WS Audiology A/S (current corporate parent, formed from the 2019 Sivantos–Widex merger) [Confirmed] — https://en.wikipedia.org/wiki/WS_Audiology
- Special note
- WS Audiology A/S (Widex's parent since 2019, same HQ town of Lynge) disclosed a ransomware attack first reported around July 2024, attributed to the BlackSuit group, affecting patient/employee data in several country subsidiaries — corporate IT incident history, not a vulnerability in Widex-branded hearing-aid hardware or firmware itself. [Likely — corporate breach confirmed by two independent trackers; exact scope/entity-naming has some inconsistency between them] — https://breach-hq.com/breaches/ws-audiology/2024-jul, https://www.breachsense.com/breaches/widex-data-breach/
- Analyst note
- A Widex OUI on a globally-administered address identifies genuine Widex hearing-aid hardware or its companion accessories; the specific prefix-to-product mapping (e.g. which model uses 40:4A:D4 vs 84:D4:C8) is not independently confirmed. [Likely] — https://www.widex.com/en/about-widex/