CNHI, LLC

CNHI, LLC based in Montgomery, Alabama, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-11-19 and reported on 2025-12-09. 10,083 Texas residents were affected. 117,049 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number). Consumers were notified via U.S. Mail.

CNHI, LLC reported unauthorized access to its computer network between April 27 and May 17, 2025. The incident affected 198 Nebraska residents, exposing names, Social Security numbers, driver’s license numbers, and financial account/payment card numbers. CNHI discovered the breach on November 19, 2025, and began notifying affected individuals on December 8, 2025. Remediation included enhancing security protocols and offering one year of complimentary credit monitoring via Experian.

CNHI LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2025-04-27 and was reported on 2025-12-08. 11,258 Indiana residents were affected. 117,049 individuals affected in total.

CNHI, LLC notified the New Hampshire Attorney General of a security incident where an unauthorized actor accessed its network between April 27 and May 17, 2025. The breach exposed names, Social Security numbers, driver's license numbers, and financial account numbers of 847 NH residents. CNHI discovered the incident on November 19, 2025, and began notifying residents on December 8, 2025, offering one year of credit monitoring via Experian.

CNHI, LLC notified consumers of a data security incident where an unauthorized actor accessed its computer network between April 27, 2025, and May 17, 2025, and exfiltrated files containing names and Social Security numbers. The company secured its network and offered one year of identity protection services. The notice was filed with the Vermont Attorney General on December 8, 2025.

CNHI, LLC reported an external system breach (hacking) affecting 57 Maine residents. Unauthorized access occurred between April 27 and May 17, 2025. CNHI discovered the incident on November 19, 2025, identifying files containing names, SSNs, driver's license numbers, and financial account numbers. Notifications were sent on December 8, 2025, offering one year of credit monitoring.

CNHI, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-12-08. 3,379 Massachusetts residents were affected.

CNHI, LLC notified Iowa AG of unauthorized network access between April 27 and May 17, 2025. Files containing names, SSNs, driver's licenses, and financial data of 4,682 Iowa residents were taken. Notification letters mailed December 8, 2025. CNHI secured network, engaged investigators, and offered one year of credit monitoring.

CNHI, LLC reported unauthorized access to its computer network between April 27, 2025 and May 17, 2025. An unauthorized actor accessed the network and took certain files. On November 19, 2025, the company determined that files containing names and Social Security numbers were involved. Affected individuals were offered one year of complimentary Experian IdentityWorks credit monitoring.

CNHI, LLC notified consumers of a data security incident involving unauthorized access to its computer network between April 27, 2025, and May 17, 2025. An unauthorized actor accessed the network and took certain files. The investigation determined that files containing names and Social Security numbers were compromised. The company secured its network, conducted an investigation, and offered one year of complimentary identity monitoring through Experian. No specific discovery date was provided in the notice, only the window of unauthorized access and the date files were reviewed (November 19, 2025).

CNHI, LLC notified individuals of a data security incident where an unauthorized actor accessed the network between April 27 and May 17, 2025. The actor exfiltrated files containing names and Social Security numbers. CNHI identified the specific data on November 19, 2025, and sent notifications on December 8, 2025. Affected individuals were offered one year of Experian IdentityWorks credit monitoring.

CNHI, LLC filed a data-breach notice with the Illinois Attorney General in December 2025 (case 25-12-640). The register records the breach as discovered on November 19, 2025. Personal information types reported: drivers license, financial account number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.