Challenge Manufacturing Data Breach Exposes Sensitive Information of 1,661 Texas Residents
On May 17, 2026, the ransomware group Chaos announced on the dark web via the Tor network that it had stolen 270 gigabytes of data from Challenge Manufacturing (formerly Challenge Mfg. Company LLC). The group threatened to publish the stolen data within three days.
The breach exposed names, Social Security numbers, and medical information of affected individuals. While the exact timeline of the attack remains unclear including when the intrusion began or when Challenge Manufacturing detected it the company reported the incident to the Texas Attorney General on June 26, 2026. So far, 1,661 Texas residents have been confirmed as impacted, though the total number of affected individuals across the U.S. has not been disclosed.
In response, Challenge Manufacturing is notifying affected individuals via U.S. Mail, providing details about the breach and potential protective measures. The company has not publicly shared further specifics on the duration of the attackers' access or additional response efforts.
Source: https://www.claimdepot.com/data-breach/challenge-manufacturing-company-2026
Challenge Manufacturing TPRM report: https://www.rankiteo.com/company/challenge-mfg-company
"id": "cha1782513063",
"linkid": "challenge-mfg-company",
"type": "Ransomware",
"date": "6/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '1661',
'industry': 'Manufacturing',
'location': 'Texas, USA',
'name': 'Challenge Manufacturing',
'type': 'Company'}],
'customer_advisories': 'U.S. Mail notifications to affected individuals',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '1661 (Texas residents only)',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Medical information']},
'date_publicly_disclosed': '2026-05-17',
'description': 'The ransomware group Chaos announced on the dark web that it '
'had stolen 270 gigabytes of data from Challenge '
'Manufacturing. The breach exposed names, Social Security '
'numbers, and medical information of affected individuals. The '
'company reported the incident to the Texas Attorney General '
'on June 26, 2026, confirming 1,661 Texas residents as '
'impacted.',
'impact': {'data_compromised': '270 GB', 'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'motivation': 'Extortion',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Chaos'},
'references': [{'source': 'Dark web (Tor network)'}],
'regulatory_compliance': {'regulatory_notifications': ['Texas Attorney '
'General '
'(2026-06-26)']},
'response': {'communication_strategy': 'U.S. Mail notifications to affected '
'individuals'},
'threat_actor': 'Chaos',
'title': 'Challenge Manufacturing Data Breach Exposes Sensitive Information '
'of 1,661 Texas Residents',
'type': 'Ransomware'}