NCH CORPORATION
ent_019e10eb98447fb6f6fef11fc6b247e0
Disclosures
25+
State AG · Leak Site · HHS OCR · 10 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
13,824
nationwide · State AG IN
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- NCH CORPORATION
- Normalized
- nch— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300OXCKKT6LROWI68
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- nch.com
Disclosure history (newest 25)newest first
- Texas State AGas victim2026-05-05
NCH Corporation based in Irving, Texas, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-04-02 and reported on 2026-05-05. 2,082 Texas residents were affected. 4,732 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information;Other;Date of Birth. Consumers were notified via U.S. Mail.
- New Hampshire State AGas victim2026-05-01
NCH Corporation notified the New Hampshire Attorney General of a breach affecting 10 state residents. Unauthorized access occurred between January 21 and February 25, 2026. The company discovered the incident on March 9, 2026. Files containing names, SSNs, DOBs, and benefits info were exfiltrated. NCH offered one year of IDX identity monitoring and enhanced security measures.
- Vermont State AGas victim2026-05-01
NCH Corporation reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-05-01. The reporting organization type is Other Commercial. 1 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit or Debit Account Info, Health Records.
- Maine State AGas victim2026-05-01
NCH Corporation reported an external system breach (hacking) affecting 5 Maine residents. Unauthorized access occurred between Jan 21 and Feb 25, 2026. NCH discovered the incident on March 9, 2026, and notified law enforcement and engaged third-party cybersecurity professionals. Notification letters were sent on May 1, 2026, offering one year of IDX identity monitoring.
- Indiana State AGas victim2026-05-01
NCH Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2026-01-21 and was reported on 2026-05-01. 167 Indiana residents were affected. 4,732 individuals affected in total.
- Massachusetts State AGas victim2026-05-01
NCH Corporation, an industrial maintenance and hygiene solutions provider, notified Massachusetts residents of a cybersecurity incident involving unauthorized access to human resources files. The breach exposed names, Social Security numbers, dates of birth, and potentially financial, payment card, and medical information for current and former employees and their dependents. NCH engaged IDX to provide two years of complimentary identity protection services and enhanced its security measures.
- Nebraska State AGas victim2026-05-01
NCH Corporation, an industrial maintenance and water treatment provider, disclosed a breach affecting 29 Nebraska residents. Unauthorized access occurred between Jan 21 and Feb 25, 2026. NCH discovered the incident on March 9, 2026, and began notifying residents on May 1, 2026. Exposed data included names, SSNs, DOBs, and potentially financial/medical info. NCH engaged third-party cybersecurity professionals, notified law enforcement, and offered one year of IDX identity monitoring.
- GLOBALLeak Siteas victim2026-03-09
Your leading global experts in industrial solutions. At NCH Corporation, we don’t just sell products—we deliver solutions that keep businesses moving. For ov... - More than 7.3TB of data has been downloaded.
- Texas State AGas victim2025-12-09
NCH Corporation based in Irving, Texas, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-11-25 and reported on 2025-12-09. 1,799 Texas residents were affected. 3,912 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information. Consumers were notified via U.S. Mail.
- Massachusetts State AGas victim2025-12-05
NCH Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-12-05. 33 Massachusetts residents were affected.
- New Hampshire State AGas victim2025-12-05
NCH Corporation notified the NH Attorney General that an unauthorized actor exploited a previously unknown vulnerability in Oracle E-Business Suite to exfiltrate files in mid-August 2025. The incident affected approximately 8 New Hampshire residents, whose names, Social Security numbers, dates of birth, and benefits enrollment information were compromised. NCH engaged third-party cybersecurity professionals, notified law enforcement, and applied the Oracle patch. Credit monitoring services were offered to affected individuals.
- Montana State AGas victim2025-12-05
NCH Corporation notified Montana residents of a data breach involving Oracle E-Business Suite. An unauthorized actor exploited a previously unknown vulnerability (zero-day) in mid-August 2025 to exfiltrate files containing names, SSNs, DOBs, and benefits info. NCH discovered the incident on Nov 25, 2025, engaged third-party forensics, notified law enforcement, and applied the Oracle patch. Affected individuals received 1 year of IDX identity protection.
- Nebraska State AGas victim2025-12-05
NCH Corporation disclosed a data breach involving Oracle E-Business Suite (EBS) in August 2025. An external actor exploited a previously unknown vulnerability (zero-day) in the software to exfiltrate files containing names and Social Security Numbers of 13 Nebraska residents. NCH discovered the incident in August 2025, confirmed the data scope on November 25, 2025, and mailed notifications on December 5, 2025. Response included engaging third-party cybersecurity professionals, notifying law enforcement, patching the vulnerability, and offering one year of credit monitoring.
- Vermont State AGas victim2025-12-05
NCH Corporation notified consumers of a data breach involving Oracle E-Business Suite. An unauthorized actor exploited a previously unknown vulnerability (zero-day) in mid-August 2025 to access files containing names, DOBs, SSNs, and benefits info. NCH engaged third-party cybersecurity professionals, notified law enforcement, applied the Oracle patch, and offered 12 months of IDX identity protection services.
- Maine State AGas victim2025-12-05
NCH Corporation reported a data breach affecting 2 Maine residents. An unauthorized actor exploited a previously unknown vulnerability (0-day) in Oracle E-Business Suite in mid-August 2025 to exfiltrate files containing names and Social Security numbers. NCH discovered the incident on November 25, 2025, applied the Oracle patch, engaged third-party forensic investigators, notified law enforcement, and sent notification letters on December 5, 2025, offering one year of credit monitoring.
- Indiana State AGas victim2025-12-05
NCH Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2025-08-09 and was reported on 2025-12-05. 124 Indiana residents were affected. 3,912 individuals affected in total.
- Illinois State AGas victim2025-12-01
NCH CORPORATION filed a data-breach notice with the Illinois Attorney General in December 2025 (case 25-12-638). The register records the breach as discovered on November 25, 2025. Personal information types reported: ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- GLOBALLeak Siteas victim2025-11-21
NCH Software is a technology firm that provides a variety of software solutions and applications for different uses. Located in Canberra, Australia, the firm offers reliable, cost-effective, and user-friendly software that includes audio tools, video and business software, utilities and more. Some popular products include WavePad, Switch, and Doxillion. The company has a strong, global user base.
- Montana State AGas victim2021-07-29
NCH Corporation notified Montana residents of unauthorized network access between March 2-5, 2021. The incident involved unauthorized access to file server folders containing personal information. NCH engaged a cybersecurity firm, notified law enforcement, and offered one year of Equifax credit monitoring. Enhanced network monitoring was implemented.
- Indiana State AGas victim2021-07-29
NCH Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2021-03-02 and was reported on 2021-07-29. 53 Indiana residents were affected. 13,824 individuals affected in total.
- Maine State AGas victim2021-07-29
NCH Corporation reported an external system breach (hacking) occurring between March 2 and March 5, 2021, discovered on June 29, 2021. The incident affected 13,824 individuals, including 6 Maine residents. Acquired data included names and driver's license numbers. NCH provided one year of complimentary credit monitoring and identity theft protection services through Equifax.
- New Hampshire State AGas victim2021-07-29
NCH Corporation notified the New Hampshire Attorney General of a security incident affecting 29 NH residents. Unauthorized access to file servers occurred between March 2 and March 5, 2021. The breach exposed employee and dependent names combined with SSNs, driver's license numbers, and/or passport numbers. NCH engaged a cybersecurity firm, notified law enforcement, and offered one year of credit monitoring to affected individuals.
- Massachusetts State AGas victim2021-07-29
NCH Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-07-29. 84 Massachusetts residents were affected. The report records the breach type as electronic.
- TEXASHHS OCRas victim2021-07-24
NCH Corporation reported to HHS on 2021-07-24 a Hacking/IT Incident involving a ransomware attack that affected 11,427 individuals. The breach compromised names, birthdates, Social Security numbers, and health insurance information from a Network Server.
- Illinois State AGas victim2021-01-01
NCH CORPORATION filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-301). The register records the breach as discovered on March 5, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.