Royal Chemical Data Breach Exposes Social Security Numbers

Chemical Services Group Inc. dba Royal Chemical, a privately held holding company in the chemical manufacturing and industrial services sector, disclosed a data breach that exposed consumers' sensitive personal information.

4,520 total individuals were affected as a result of the breach, including 33 Indiana residents, four Massachusetts residents, four New Hampshire residents, and 462 Texas residents were reported as affected.

On Apr. 25, 2025, Royal Chemical learned an unauthorized user had gained access to their network. Upon learning this, an investigation was undergone to determine the extent of the breach and to identify the affected files.

The investigation, which concluded on Mar. 3, 2026, found that the unauthorized access occurred sometime between Apr. 11, 2025, and Apr. 26, 2025.

The information types exposed in the breach include full names, Social Security numbers, dates of birth, driver's licenses or other state identification information, financial account information, and digital signatures.

On May 14, 2025, a ransomware group known as Lynx posted a claim on the Tor network, a part of the internet that allows users to browse anonymously and is frequently used by cybercriminal groups to share stolen data. In its posting, the Lynx group stated that Royal Chemical had fallen victim to its ransomware operation and claimed to have obtained the organization's data.

Royal Chemical's response to the breach

Royal Chemical notified affected individuals about the incident through a written notice.

Affected individuals are entitled to one free credit report every 12 months from each of the three major nationwide credit reporting companies. Consumers can request reports by calling 1-877-322-8228 or visiting AnnualCreditReport.com.

Steps to take if your information was exposed

• Place a fraud alert or credit freeze with Equifax (1-800-525-6285), Experian (1-888-397-3742) and TransUnion (1-800-680-7289) to help prevent new accounts from being opened using your Social Security number.
• Request your free credit reports at AnnualCreditReport.com and review them carefully for any accounts or inquiries you do not recognize.
• Monitor your bank and credit card statements regularly for any unauthorized charges or suspicious transactions.
• File a report with local law enforcement if you discover any signs of identity theft and keep a copy of the police report to provide to creditors if needed.
• Be cautious of phishing attempts that reference Chemical Services Group, Royal Chemical or this data breach by name, as scammers sometimes use real breach notifications to collect additional personal information.