NCH Corporation 2025 Data Breach
The 2025 NCH Corporation Employee Benefits Plan data breach affected 4,055 people according to the current HHS record.
Exposed Data Types
1 sensitive4- Health insurance information
- Names
- Dates of birth
- Social security numbers
About This Breach
NCH Corporation provides industrial maintenance, water-treatment, and hygiene solutions. The breach notice concerns the health plan offered to the company's employees and their dependents.
How Did the Incident Occur?
According to NCH's official notice, an unauthorized actor exploited a previously unknown vulnerability in Oracle E-Business Suite and took files from the company's application. The investigation showed that the files were taken in mid-August 2025 and that NCH determined on November 25, 2025 that some files contained personal information.
What Information Was Affected?
The information varied by person. The official notice says the files contained names and one or more of the following: dates of birth, Social Security numbers, and health-plan benefits enrollment information.
How Did NCH Respond?
NCH said it launched an investigation with outside cybersecurity specialists, notified law enforcement, and applied Oracle's patch. The company also offered notice recipients one year of identity-protection services.
What Should Affected People Do?
Notice recipients should enroll in the offered protection service and review credit reports, health-plan statements, and account activity for transactions or changes they do not recognize. They should contact the relevant health plan, financial institution, or NCH notice line directly if they find suspicious activity.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
