Challenge Manufacturing Data Breach Exposes Social Security Numbers

Challenge Manufacturing, formally known as Challenge Mfg. Company LLC, disclosed a data breach that exposed sensitive personal information that impacted 24,211 individuals, including 1,661 Texas residents.

On May 17, 2026, Chaos, a ransomware group, posted on the dark web through the Tor network, stating it had obtained 270 gigabytes of data from Challenge Manufacturing's systems. The group also threatened to publish the stolen data within three days.

The exact dates of when the ransomware attack first began and when Challenge Manufacturing discovered the intrusion have not been detailed in available disclosures. It is also unclear how long the attackers may have had access to the company's network before the dark web posting appeared.

The types of personal information exposed in this breach included names, Social Security numbers and medical information.

The company disclosed the breach to the attorneys general offices of Indiana, Massachusetts, New Hampshire, Texas and Vermont. The total number of individuals affected across the United States has not been publicly reported.

Challenge Manufacturing's response to the breach

Challenge Manufacturing is notifying individuals affected by the breach through letters sent by U.S. Mail. These letters are intended to inform recipients about the details of the incident and what they can do to protect themselves.

Affected individuals should review their notification letters carefully when they arrive for complete information about any protective services or resources the company may be providing.

Given the sensitive nature of the information involved in this breach, individuals who believe they may be affected are encouraged to remain vigilant.