CNHI cnhi.com CNHI data breach: what happened and what to do
CNHI, LLC told people in December 2025 that an unauthorized actor was in its network from April 27 to May 17, 2025 and took files. The files held names with Social Security numbers, and in some cases driver's license or other ID numbers and financial information.
View all 13,115 breaches- Breach date
- 27 Apr 2025
- Made public
- 8 Dec 2025
- Data exposed
- Names, Social security numbers, Government issued IDs, Financial information
- Last updated
What happened
CNHI, LLC sent breach notices starting December 8, 2025. The letter says an unauthorized actor accessed the company's computer network between April 27, 2025 and May 17, 2025 and took certain files. CNHI found out which files held personal information on November 19, 2025, and the notices followed about three weeks later.
The breach was reported to state attorneys general, including California, Washington, Maine and South Carolina. The Maine filing lists 57 Maine residents. CNHI hasn't published a total for everyone affected.
What was exposed
Per the notice, the files contained names together with Social Security numbers. Some notices also mention a driver's license or other government ID number and financial information. What applies to you depends on your own letter.
A name with a Social Security number is the combination criminals need to open credit in your name, file a fake tax return or take over an existing account. Because the files were taken in spring 2025 and people were told in December, the data has been out of your hands for months. A freeze is the best fix and it works whether or not you ever see misuse.
CNHI's response
CNHI offered one year of credit monitoring and identity theft protection through Experian to people whose information was involved. Enrollment instructions and a code are in the letter. If you got one, use it before the enrollment deadline, and still freeze your credit because monitoring only tells you after something happens.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze stops lenders from opening new accounts in your name. It's free and you can lift it when you need credit. Do it at Equifax, Experian and TransUnion, since each bureau keeps its own file.
- 2
Enroll in the free Experian monitoring if you got a letter
The offer is one year and the code comes in your letter. Enroll by the deadline printed there.
- 3
Watch statements and credit reports
Pull your free reports at annualcreditreport.com and read your bank and card statements for charges you don't recognize over the next 12 to 24 months.
- 4
Expect scams that mention the breach
Messages that quote CNHI, your Social Security number or 'credit monitoring' may be phishing. Go to the company's site yourself instead of clicking.
- 5
Check whether your email or phone is in this and other breaches
Run a free scan at serus.ai. Serus monitors breach databases and the dark web and alerts you when your info shows up. It can't remove data that has already leaked, so the steps here still matter.
Frequently asked
Was I affected by the CNHI data breach?
Only people CNHI mailed a notice to were confirmed as affected. If you got a letter dated around December 2025, your information was in the files.
What was exposed in the CNHI breach?
Names with Social Security numbers, and for some people a driver's license or other government ID number and financial information, according to the notice.
Should I freeze my credit?
Yes, if your Social Security number was involved. It's free and stops new accounts being opened in your name.
Is there a settlement?
No settlement has been announced. Law firms have announced investigations, which is not the same thing.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
