DisclosureLens
HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

CNHI, LLC

bd_bad5e82d02c73257 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Dec 8, 2025

To disclose

—

Affected

1,203state residents only

Linked

6 filings

Confidence

62%
Full breach record for CNHI, LLC →4 incidents on file

CNHI, LLC notified consumers of a data security incident involving unauthorized access to its computer network between April 27, 2025, and May 17, 2025. An unauthorized actor accessed the network and took certain files. The investigation determined that files containing names and Social Security numbers were compromised. The company secured its network, conducted an investigation, and offered one year of complimentary identity monitoring through Experian. No specific discovery date was provided in the notice, only the window of unauthorized access and the date files were reviewed (November 19, 2025).

Leak gap clock✗ Leak >180d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Apr 27, 2025

Begins

Dec 8, 2025

Filed

This filing is one of 6 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 205 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 7d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Illinois State AGDec 1 · first
Nebraska State AG+7d
Indiana State AG+7d
New Hampshire State AG+7d
Vermont State AG+7d
South Carolina State AG+7d · this page

Pattern: first filing Dec 1 (IL), last Dec 8 (SC) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.