Challenge Manufacturing Data Breach
What Happened?
Challenge Manufacturing, formerly known as Challenge Mfg. Company LLC, disclosed a data breach after a ransomware group known as Chaos claimed responsibility for stealing data from the company’s network. On May 17, 2026, the group posted on the Tor dark web, alleging that it had obtained approximately 270 gigabytes of data from Challenge Manufacturing’s systems and threatened to publish the stolen information within three days.
The company has not publicly disclosed when the unauthorized access began, when it discovered the incident, or how long the attackers may have had access to its systems.
Challenge Manufacturing reported the incident to the Texas Attorney General on June 26, 2026. According to the filing, the breach has affected 1,661 Texas residents, although the total number of individuals affected nationwide has not been publicly disclosed.
The company stated that the compromised information may include names, Social Security numbers, and medical information.
Who was affected?
The breach affected individuals whose personal information was maintained by Challenge Manufacturing.
According to the Texas Attorney General filing, 1,661 Texas residents were affected. However, Challenge Manufacturing has not disclosed the total number of individuals affected across the United States.
What Information was taken?
According to the company’s filing, the compromised information may include:
- Names
- Social Security numbers
- Medical information
The exact information exposed may differ from person to person.
What is the company doing?
Challenge Manufacturing is notifying affected individuals by U.S. Mail. The notification letters explain the incident and provide recipients with information about any protective services or additional resources that may be available.
The company advises recipients to carefully review their notification letters for details regarding the specific information involved in their case.
Because the breach involved sensitive personal information, including Social Security numbers, Challenge Manufacturing encourages affected individuals to remain vigilant by monitoring their financial accounts, reviewing their credit reports, and watching for signs of identity theft or fraud.
What can you do?
Individuals who receive a notification letter should consider taking the following precautions:
- Review the notification letter carefully to determine what information was involved.
- Monitor financial accounts and credit reports for suspicious activity.
- Report unauthorized transactions immediately.
- Consider placing a fraud alert or security freeze with the major credit bureaus if Social Security numbers were exposed.
- Keep copies of any correspondence related to the breach.