Challenge Manufacturing Data Breach
The 2026 Challenge Manufacturing data breach was confirmed through a Texas Attorney General entry and a notice letter preserved in Massachusetts's state archive. The Texas entry reports at least 1,661 affected people.
This classification is based on a reviewed lower bound; the actual impact and severity may be higher.
Exposed Data Types
1 sensitive3- Medical information
- Names
- Social security numbers
About This Breach
Because a verified nationwide total has not been disclosed, 1,661 is presented as the lower bound.
Challenge Manufacturing, legally named Challenge Mfg. Company, LLC, is an employee-owned manufacturer providing stamping, welding, and assembly services to automotive manufacturers. Its official website says the company was established in 1981 and has grown to 12 U.S. locations and more than 3,000 team members.
How Was the Breach Confirmed?
The Texas Attorney General entry published on June 26, 2026 separately lists the company name, Grand Rapids address, 1,661 Texas residents, affected data categories, and notice by U.S. Mail. Massachusetts's official archive also preserves a June 1 consumer notice issued in Challenge's name. The reviewed official documents do not disclose when unauthorized access began or when it was discovered.
What Information Was Affected?
The Texas entry lists names, Social security numbers, and medical information. Not every field necessarily applied to every person. This combination can create long-term risks involving identity theft, fraudulent credit applications, targeted scams, and medical identity misuse.
What Support Did the Organization Offer?
Challenge offered eligible notice recipients 24 months of identity-protection services through IDX. The service includes credit and dark-web monitoring, an identity-fraud loss reimbursement policy of up to $1 million, and managed identity-recovery support. The notice lists September 1, 2026 as the enrollment deadline.
What Should Affected People Do?
Notice recipients should use their personal enrollment code only at the official IDX address and check the enrollment deadline. People whose Social Security number was involved can review credit reports and may place a free credit freeze or fraud alert with the three credit bureaus. Unfamiliar medical bills, insurance claims, new accounts, and suspicious messages claiming to represent Challenge should also be monitored.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
