DisclosureLens
HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedData ExfiltratedFinancial accountHealth (basic)Identity (basic)Government IDPCIMediumContained

NCH CORPORATION

bd_df70bf7a043fe76e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 1, 2026

To disclose

—

Affected

38state residents only

Linked

18 filings

Confidence

65%
Full breach record for NCH CORPORATION →4 incidents on file

NCH Corporation, an industrial maintenance and hygiene solutions provider, notified Massachusetts residents of a cybersecurity incident involving unauthorized access to human resources files. The breach exposed names, Social Security numbers, dates of birth, and potentially financial, payment card, and medical information for current and former employees and their dependents. NCH engaged IDX to provide two years of complimentary identity protection services and enhanced its security measures.

Leak gap clock⏱ Leak >90d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

May 1, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 18 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 160 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Show 5 more filings ↓up to 147d gap

Showing first 10 of 17 linked disclosures.

Filing propagation · 10 filings · 7 states

View merged incident ↗
Massachusetts State AGDec 5 · first
New Hampshire State AGDec 5 · first
Texas State AG+4d
New Hampshire State AG+147d
Vermont State AG+147d
Maine State AG+147d
Indiana State AG+147d
Nebraska State AG+147d
Massachusetts State AG+147d · this page
Texas State AG+151d

Pattern: first filing Dec 5 (MA), last May 5 (TX) — a 151-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 17 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.