NCH Data Breach Lawsuit Investigation
Individuals nationwide are now receiving mailed notices that their personal information was accessed during a recently disclosed cybersecurity incident at NCH. If you got a letter dated December 5, 2025, you may qualify for free identity-theft services and could pursue compensation through a data-breach lawsuit. Contact a consumer-rights attorney to understand your options.
Key Facts at a Glance
- Breach disclosed: December 5, 2025
- Incident window: unauthorized access occurred in mid-August 2025
- Discovery date: November 25, 2025
- Data exposed: name, Social Security number, date of birth, and benefits enrollment information
- Free services offered: complimentary one-year identity-protection membership through IDX
- Affected systems: Oracle E-Business Suite (EBS)
What Happened?
NCH Corporation (NCH) uses Oracle’s E-Business Suite software to manage internal operations. According to the company’s notice filed with the Maine Attorney General, an unauthorized actor exploited an undisclosed vulnerability in Oracle EBS and exfiltrated files belonging to multiple organizations, including NCH.
The timeline released by NCH indicates:
- Mid-August 2025 — Threat actor obtained files from NCH’s Oracle EBS environment.
- November 25, 2025 — After reviewing extracted data, NCH confirmed the presence of personal information.
- December 5, 2025 — Consumer notification letters were mailed and regulators were informed.
Information Involved
The following data elements may have been exposed:
- Name
- Date of birth
- Social Security number
- Benefits enrollment information
No payment-card, bank-account, or medical diagnosis information was listed in the notice.
Company Response
After detecting the compromise, NCH states it:
- Secured its Oracle EBS implementation and applied Oracle’s security patch.
- Engaged third-party cybersecurity professionals to investigate.
- Notified law-enforcement authorities and is cooperating with their investigation.
- Arranged a complimentary one-year IDX identity-protection membership for impacted individuals.
Actions You Can Take
- Enroll in the free IDX identity-protection service before the deadline listed in your letter.
- Monitor credit reports and account statements for unfamiliar activity.
- Consider placing a fraud alert or security freeze with the credit bureaus.
- Keep all correspondence from NCH; it is proof of your eligibility in any future settlement.
- Speak with a data-breach attorney about potential claims for damages such as time spent remedying identity-theft concerns.
Company Overview
Founded in 1919, NCH delivers industrial maintenance solutions worldwide.
- Website: nch.com
- Headquarters: 2727 Chemsearch Blvd., Irving, Texas, United States
- Industry: Industrial Maintenance Solutions
- Parent Company: Solenis
- Employees: 8,500+
- Social: Facebook | LinkedIn | Instagram
Frequently Asked Questions
1. I received a data breach letter from NCH — what should I do?
Follow the activation instructions in the letter to enroll in the free one-year IDX identity-protection service, review your credit reports, and consult an attorney about your rights.
2. How do I submit a claim related to the NCH data breach?
Retain your notification letter and speak with a data-privacy law firm that is investigating claims on behalf of affected consumers. They can guide you through filing a claim for potential compensation.
3. What information did the NCH breach expose?
The notice lists your name along with one or more of these data elements: date of birth, Social Security number, and benefits enrollment information.
4. Did NCH offer credit monitoring, and for how long?
Yes. NCH arranged a complimentary one-year membership with IDX’s identity-protection service.
5. How many people were affected by the NCH breach?
NCH has not publicly disclosed the total number of impacted individuals as of December 6, 2025.
6. How can I get the official breach notice PDF for NCH?
You can download the full notice filed with the Maine Attorney General using the “Download Official Breach Notice (PDF)” button above.