Trade show management firm Nth Degree hit by data breach, exposing sensitive data
Learn More
Nth Degree Investment Group, a U.S. trade show and event marketing management company, is reporting a data breach that compromised personal information belonging to thousands of individuals.
Nth Degree serves as a major event management firm in the American market, providing trade show and experiential marketing services to Fortune 100 companies. The organization's client portfolio includes technology giants Microsoft, HP, Dell, and Verizon, automotive manufacturers Mercedes-Benz and Volvo, consumer goods companies PepsiCo and Walmart, and numerous other multinational corporations.
The incident occurred between December 12 and December 20, 2024 and went undetected for several months before being discovered on March 24, 2025, during an internal investigation.
The attackers managed to steal sensitive data. Exposed data includes:
- Full names
- Social Security numbers
- Driver's license numbers
- Government-issued identification numbers (including passports and state ID cards)
- Financial account information and credit or debit card numbers
- Health insurance information
- Medical records
- Financial account details
Reports regarding the number of affected individuals vary significantly across different sources and filings. According to the company's filing with the Office of the Maine Attorney General, over 39,000 individuals were impacted by the breach. Other regulatory filings and legal documents indicate that approximately 25,730 people across the United States were affected, with the highest concentration of victims reported in Texas.
The nature of the attack is not disclosed.
Nth Degree began notifying affected individuals through personalized mail communications starting April 14, 2025, nearly four months after the initial breach occurred. The company has offered complimentary credit monitoring services for a period of 12 months through TransUnion to all affected individuals, including identity theft protection and credit monitoring capabilities.
