CNHI Data Breach Exposes Sensitive Information of Over 1,200 Individuals CNHI, LLC, a major U.S. media company operating over 130 print and digital news outlets across 22 states, suffered a significant data breach between April 27 and May 17, 2025. The PLAY ransomware group infiltrated CNHI’s network, exfiltrating files containing sensitive personal data. The hackers publicly claimed the breach on the dark web on May 21, 2025, threatening to leak the stolen information. On November 19, 2025, CNHI confirmed that the breach exposed personally identifiable information (PII) of individuals, including at least 1,203 residents in South Carolina, 57 in Maine, and 23 in Rhode Island. Compromised data may include names, addresses, dates of birth, Social Security numbers, driver’s license numbers, and financial information. CNHI began notifying affected individuals on December 8, 2025, after disclosing the breach to the Attorney Generals’ offices in Maine, South Carolina, and Vermont. The company is offering free Experian IdentityWorks credit monitoring to impacted individuals. Legal firms, including Shamis & Gentile P.A., are investigating potential compensation for those affected, citing possible reimbursement for expenses, time lost, or emotional distress. The breach underscores the growing threat of ransomware attacks targeting media organizations and the risks of exposed PII.