Blanchard

Blanchard, the California-based leadership development and training company, is tied to a data breach that our investigation team estimates occurred on May 7, 2026. The listing, added to our database on May 15, 2026, contains roughly 494,000 records. No single actor has claimed the listing itself, but independent tracking sites have linked the company to a separate extortion event earlier this year.

The picture is complicated by two timelines. Ransomware.live lists Blanchard as a victim of the Payoutsking group, discovered on April 30, 2026, with an estimated attack date of March 9, 2026 and about 266 GB of data exfiltrated. Separately, a notification letter filed with the Nebraska Attorney General describes unauthorized activity on Blanchard's network between March 3 and March 4, 2026. Our team's estimated date of May 7 may reflect a later publication or tranche of the indexed data, and the exact relationship between these events is not fully established.

Breach Timeline

March 3–4, 2026: Blanchard detected unusual activity in its network environment, according to its notification letter filed with the Nebraska Attorney General. An investigation found that certain information may have been copied by an unauthorized individual during this window.

April 8, 2026: Blanchard began mailing written notices to potentially affected individuals and offered 12 months of free credit monitoring through Cyberscout, a TransUnion company.

April 30, 2026: Ransomware.live recorded Blanchard as a victim of the Payoutsking group, with an estimated attack date of March 9, 2026.

What Information Was Compromised?

Our analysis found the following data types in this breach:

Names: 494,404 records, essentially the full listing

Email addresses: 458,734

Phone numbers: 96,874

Street addresses: 99,616

Social Security numbers: 2,590

Dates of birth: 2,557

The listing does not indicate how many bank account numbers, if any, are included, and we have not confirmed that category.

Not every individual is affected by every type of data listed here.

The company's notification letter, filed with the Nebraska Attorney General, does not itemize every data field involved; it states that the specific information varied by individual and that the company reviewed the potentially impacted data in tranches, completing one tranche review on April 3, 2026.

What Are the Potential Risks for Affected Individuals?

For most people in this listing, the exposure is contact information: name, email, phone, and possibly a street address. That combination is enough to fuel phishing emails, smishing texts, and convincing scams that appear to come from a known company.

The smaller groups with exposed Social Security numbers and dates of birth face more serious risks. Those two fields together are building blocks for identity theft, fraudulent loan applications, and tax-related fraud. The company said in its notice that it was not aware of any actual or attempted misuse of the information, but that statement reflects its knowledge at the time of notice, not a guarantee.

What Is Blanchard Doing in Response?

In its April 8, 2026 notification letter, Blanchard said it retained legal counsel and third-party forensic specialists after detecting the unusual activity on March 4, 2026. The company is notifying individuals in stages as it reviews the affected data. It is offering 12 months of free single-bureau credit monitoring, credit report, and credit score services, along with proactive fraud assistance, through Cyberscout. Enrollment must be completed within 90 days of the notice date, and the assistance line is 1-800-405-6108. Blanchard has not publicly confirmed or denied a connection to the Payoutsking extortion claim as of September 25, 2026.

What Should You Do If You Were Affected?

Enroll in the free credit monitoring Blanchard is offering if you received a notice, and do so within the 90-day window.

Place a free security freeze or fraud alert with Equifax, Experian, and TransUnion, especially if your Social Security number was involved.

Watch your bank and credit card statements for charges you did not make.

Be skeptical of unexpected emails or texts referencing Blanchard, training services, or account problems, and avoid clicking links in them.

Consider filing your tax return early and monitor IRS notices, since a leaked date of birth plus name can enable fraudulent filings.