Challenge Mfg Data Breach Notice (Vermont Attorney General)

A single person’s Social Security number is now listed in a Vermont Attorney General filing as exposed in an incident reported by Challenge Mfg. The filing, dated June 26, 2026, states that one Vermont resident’s record was involved and that Social Security numbers were among the information included.

Social Security Numbers Cannot Be Replaced

When a Social Security number leaves an organization’s control it stays valuable to identity thieves for the rest of the person’s life. Unlike a credit card or password, it cannot be cancelled or reissued on request. That permanence is the central fact of this notice. The record does not list any other categories of information, which means no passwords, no financial account numbers, and no medical details appear in the filing. That absence is meaningful: the exposure is narrow but irreversible.

What This Exposure Enables

A Social Security number paired with a name and date of birth—information often already available from other public or breached sources—allows criminals to file fraudulent tax returns, open new accounts, apply for government benefits, or impersonate the victim in medical or employment settings. Because the number never expires, the risk does not diminish over time. Credit monitoring helps detect some misuse, but it cannot prevent every form of fraud that relies on the SSN itself.

The filing does not disclose how the information was accessed or whether any encryption or access controls were in place. Those details remain unknown. What is known is that one individual’s record reached the Vermont Attorney General’s breach list on June 26, 2026.