About NCH Corporation
NCH Corporation, a company based in Irving, TX, specializing in industrial maintenance, water treatment, and hygiene solutions, recently experienced a data breach. The breach involved an external system hack that targeted the company’s Oracle E-Business Suite (EBS) software. This incident was discovered on November 25, 2025, and affected a limited number of individuals, including two residents of Maine. The breach was part of a larger attack exploiting a vulnerability in Oracle EBS applications used by multiple organizations.
What Happened
NCH and many organizations use Oracle’s E-Business Suite (“EBS”) software to help manage their operations. An unauthorized actor leveraged a previously unknown vulnerability in Oracle EBS to take information from numerous organizations’ Oracle EBS applications. We recently learned that NCH was one of those organizations.
The breach occurred on August 9, 2025, and NCH discovered it on November 25, 2025. The unauthorized access resulted in the exposure of personal information, including names and Social Security numbers, affecting a small number of individuals, specifically two residents of Maine.
Next Steps
Affected users are encouraged to enroll in the complimentary identity protection services provided by IDX. This service includes credit monitoring and identity theft protection for one year. Users should also remain vigilant by reviewing their account statements and credit reports for any unauthorized activities. If any suspicious activities are detected, it is advised to contact the service provider immediately for assistance. NCH Corporation has also set up a dedicated toll-free call center to address any concerns or questions regarding the incident.
Identity Theft Protection Services
Impacted individuals are offered a complimentary one-year membership to IDX’s identity protection services. This includes credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services. Enrollees will benefit from services such as single bureau credit monitoring, underground website monitoring, and identity theft insurance coverage, which provides reimbursement for expenses incurred due to identity theft. Affected individuals are encouraged to activate these services promptly to protect against potential misuse of their personal information.