Pentagon data breach affects more than 3 million people
The US Department of Defense revealed a 9-month breach of a system belonging to the Defense Manpower Data Center, allowing unauthorized access to sensitive personal data of over 3 million people, including both living and deceased individuals. The vulnerability was discovered in July 2026, with access beginning in October 2025. Leaked data includes Social Security numbers, names, and dates of birth.
The US Department of Defense disclosed a widespread security breach targeting a system of the Defense Manpower Data Center, a central repository for military personnel data. The breach, lasting approximately 9 months, allowed unauthorized users to access files containing sensitive personal information. According to a notification sent by the department to affected individuals on September 24, the security vulnerability was discovered on July 16, 2026, while the investigation showed unauthorized access began in October 2025. The entry point was a vulnerability in a file-sharing system, enabling access to unencrypted data on a server. Leaked data includes Social Security numbers, names, dates of birth, contact information, gender, race, and military service-related information. The breach affected 2.76 million living individuals and approximately 294,000 deceased individuals, totaling over 3 million records. The department has not disclosed the identity of the hackers or whether the data was copied or misused, but has begun notifying affected individuals and offering credit monitoring services.