Millions of current and former U.S. military service members are being notified that their personal information was compromised in a months-long cyberattack targeting Pentagon personnel records. The breach, facilitated through a vulnerability in an unencrypted file-sharing system managed by the Defense Manpower Data Center (DMDC), exposed sensitive data including Social Security numbers, birth dates, and service details for approximately 3.1 million living and deceased individuals.
This incident compounds a growing crisis in federal cybersecurity, following closely on the heels of a major data theft at the FBI earlier in the month. While the Department of Defense maintains there is currently no evidence that the stolen data has been weaponized or misused, security experts warn of severe counterintelligence risks, such as foreign actors profiling or coercing federal employees.
Authorities are working to assess the full scope of the breach and notify affected personnel as federal agencies face mounting pressure to overhaul their legacy identity management and data protection frameworks.
- A massive Pentagon data breach has exposed records of roughly 3.1 million current and former military personnel.
- Unauthorized users exploited an unencrypted file-sharing vulnerability between late 2025 and mid-2026.
- Stolen information includes Social Security numbers, dates of birth, and military service histories.
- The breach highlights a troubling trend of cyberattacks targeting high-level U.S. federal agencies.
Sources:
