nch.com Listed by Embargo Ransomware Group

On March 9, 2026, the ransomware group Embargo added NCH Corporation to its leak site and claimed to have exfiltrated more than 7.3TB of internal files from the industrial solutions provider.

What Public Reporting Shows

Public reporting indicates that Embargo posted proof of the breach on its onion site, showing samples of the stolen data. The company, which provides maintenance chemicals, lubricants, and water-treatment products to industrial clients worldwide, has not yet issued a public statement confirming the volume or exact nature of the exposed files. Available reporting describes the incident as a ransomware attack in which the threat actors first gained access, exfiltrated data, and then encrypted systems. No confirmed list of specific data types such as customer records or employee personal information has been released, though the sheer size of the download—7.3TB—suggests a broad range of internal documents may be involved.

Why This Matters for You and Your Family

When a company like NCH suffers a breach, the information stolen can easily include details that connect back to ordinary customers, suppliers, or employees. If your name, address, email, phone number, or payment records appear in those files, criminals can use them to target you directly. For families this often means increased risk of identity theft, unexpected bills, or phishing emails that look legitimate because they reference real transactions. Even when the primary victim is a business, the fallout lands on individuals who had no say in the company’s security decisions.

Credential leaks from such incidents frequently cascade into account takeovers elsewhere, especially when the same password was reused on personal services.