Chemicals

March 17, 2026

Avanel, New Jersey-based Pride Solvent & Chemical Co., Inc., Pride Solvent & Chemical Co. of NY, Inc., and Pride Solvent and Chemical Co. of New Jersey, Inc. suffered a cyberattack in March where personally identifiable information from its workers ended up stolen in the hack.
“On or about March 17, 2026, the company discovered it suffered a cybersecurity attack on its on-premises servers,” according to a notice to victims of the attack. “The company believes the cybersecurity attack occurred on or about March 13, 2026 through March 17, 2026.”
Upon discovery of the breach, the company retained outside counsel and engaged an independent forensic expert to begin an investigation.

January 21, 2026

Irving, Texas-based maintenance, repair, and overhaul (MRO) product provider, NCH Corporation, suffered a cyberattack in January where its employees fell victim to a hack involving their personally identifiable information.
“On March 9, 2026, NCH Corporation became aware that an unauthorized actor may have taken files from its network,” the company said in a notice to victims. “NCH immediately implemented its response procedures, took containment measures, and launched an investigation with the support of third-party cybersecurity professionals.”
Additionally, NCH also notified law enforcement and is supporting its investigation.
As a result of its investigation, the evidence showed there was unauthorized activity in NCH’s network between January 21 and February 25. During that time, an unauthorized actor obtained copies of certain files from NCH’s network.

July 26, 2025

East Rutherford, New Jersey-based chemical provider, Diamond Chemical Co, LLC suffered a cyberattack last July and is now informing victims their personally identifiable information ended up stolen in the hack.
“On or about September 2, 2025, Diamond Chemical discovered suspicious activity on certain systems in our environment that led to a temporary network disruption,” the company said in a notice to victims. “In response, Diamond Chemical promptly began an investigation with the assistance of third-party specialists to determine what occurred.
In the ensuing investigation, the company found an unauthorized actor accessed certain systems between July 26, 2025, and September 2, 2025, and copied files without permission.

October 23, 2025

Salem, Virginia-based metalworking fluid manufacturer QualiChem, Inc. suffered a cyberattack in October and is now informing victims of the attack.
The attack occurred between October 23, 2025, and December 16, 2025, when an external hacking incident compromised the security of QualiChem, Inc.’s systems, according to a notice by the company.
The company discovered the attack February 25 this year, according to a notice the company released.

August 7, 2025

Peru, Illinois-based chemical manufacturer Carus, LLC, suffered a cyberattack in August where attackers were able to steal personally identifiable information from victims.
“Carus, LLC writes to notify you of an incident that may have impacted some of your personal information described below. We take the privacy and security of information in our care very seriously.”
The company said at this time, there is no evidence to suggest that any information was subject to actual or attempted misuse as a result of this incident.
On August 7, Carus experienced a network disruption. Upon discovery, Carus immediately took steps to secure the network and engaged a third-party forensic firm to investigate the nature and scope of the incident.

April 26, 2025

Pendergrass, Michigan-based chemical maker The Seydel Companies, Inc. suffered a cyberattack this past spring that led threat actors to make off with personally identifiable information of victims.
“On April 26, 2025, we identified unusual activity indicating potential unauthorized access to our network,” the company said in a letter to victims of the hack. “Upon learning of the incident, Seydel immediately took steps to secure our systems and commenced a prompt and thorough investigation assisted by external cybersecurity professionals experienced in handling these types of situations to assist us in determining the full extent of the incident and scope of any data impacted.”
The company said its investigation found an unauthorized actor accessed its systems on April 26, and, as a result, possibly viewed and/or obtained certain files.

December 22, 2024

Burton, Ohio-based polymer compound maker HEXPOL Holding Inc. suffered a cyberattack this past December and is now informing victim their personally identifiable information ended up stolen in the hack.
On December 22, 2024, HEXPOL detected unauthorized access to its network.
“Upon learning of this issue, HEXPOL took immediate steps to securely contain our network, restore our systems, and launched an immediate investigation in consultation with outside cybersecurity professionals, the company said in a letter to victims of the attack. As part of our investigation, we devoted considerable time and effort to determine what, if any, information ended up impacted by this incident.”

June 9, 2025

Sarasota, Florida-based JCI Jones Chemicals, Inc. suffered a cyberattack via a third-party vendor where the attacker was able to make off with personally identifiable information.
“A cybercriminal obtained unauthorized access to a third-party vendor that maintained certain JCI data,” the chemical manufacturer said in a letter to victims. “Through our subsequent investigation, we determined that the unauthorized party accessed and acquired copies of certain JCI files on or about June 9, 2025.”
JCI said the files contained the name and address in combination with Social Security number, driver’s license number, certain limited medical information, and bank account information.

February 11, 2025

Arlington, Texas-based Huntsman Building Solutions (USA) LLC fell victim to a cyberattack that had an impact on certain files on the company’s information systems.
“On February 11, 2025, we learned that an unauthorized third party had gained access to our information systems,” the company said in a letter to victims of the attack. “The company’s IT team immediately blocked any further access by the unauthorized third party, took steps to ensure our systems are secure and commenced a comprehensive investigation with the assistance of a leading cybersecurity firm.”
Huntsman then conducted a lengthy and thorough analysis of this incident. It was able to determine personal information including name and other personally identifiable information the company did not disclose ended up compromised in the attack.

January 16, 2025

Athena Cosmetics, Inc. which does business as RevitaLash Cosmetics in Ventura, California, suffered a cyberattack where threat actors purloined personally identifiable information.
On January 16, cosmetics maker, Athena, said it found suspicious activity in its environment and immediately initiated an investigation with the assistance of independent cybersecurity experts. As a result of the investigation, Athena determined certain files may have been acquired without authorization.
“Upon discovering the event, Athena moved quickly to investigate and respond to the incident, assess the security of Athena systems, and identify potentially affected individuals,” the company said in a notice to victims. “Athena is also working to implement additional safeguards and training to its employees.”