NCH Corporation (“NCH”) and its current and former subsidiaries understand the importance of protecting information regarding employees and their dependents. This notice provides information about a security incident involving some of that information.
On March 9, 2026, NCH became aware that an unauthorized actor may have taken files from its network. NCH immediately implemented its response procedures, took containment measures, and launched an investigation with the support of third-party cybersecurity professionals. NCH also notified law enforcement and is supporting its investigation.
The evidence showed that there was unauthorized activity in NCH’s network between January 21, 2026, and February 25, 2026. During that time, an unauthorized actor obtained copies of certain files from NCH’s network. NCH has been conducting a careful review of the files and, on April 2, 2026, determined that one or more of the files contained information related to NCH’s employee group health plan. The information was used for human resources purposes and included names, dates of birth, Social Security numbers, and benefits enrollment information of certain health plan participants. The files also may have included names and one or more of the following: taxpayer identification number, driver’s license or state-issued identification card number, passport number, other government-issued identification number, financial account information, payment card information, medical information, and/or health insurance information.
On May 1, 2026, NCH began mailing notification letters to individuals whose information was identified in the files and for whom NCH has sufficient contact information. NCH also established a dedicated, toll-free call center to answer questions individuals may have about the incident. Individuals with questions can call 888-504-8648, Monday through Friday, between 9:00 a.m. and 9:00 p.m. Eastern Time, excluding holidays. NCH is providing the individuals whose Social Security numbers, driver’s license numbers, or state identification card numbers were involved with a complimentary membership to an identity monitoring and protection service through IDX. Additionally, the notification letters remind individuals that it is always a good idea to be vigilant for incidents of fraud or identity theft by reviewing their account statements and free credit reports for any unauthorized activity.
To help prevent something like this from happening again, NCH has taken additional steps to enhance its existing security measures
