Pentagon Data Breach Exposes Sensitive Information of Nearly 3 Million Individuals
A cybersecurity incident at the Defense Manpower Data Center compromised personal details of active duty, deceased, and civilian personnel.
A breach within the Pentagon's personnel database has resulted in the exposure of sensitive information belonging to approximately 2.76 million living individuals and an additional 294,000 deceased individuals. The compromised data includes Social Security numbers and details about the job roles held by military and civilian personnel, raising potential national security concerns, according to a U.S. defense official.
The unauthorized access occurred between October 2025 and July 2026, impacting an information system managed by the Defense Manpower Data Center (DMDC). Upon discovery of the vulnerability, the DMDC took immediate steps to remediate the issue. The agency maintains a vast repository of over 60 million personnel records, serving as a central hub for information on active-duty and reserve troops, civilian employees, contractors, retirees, veterans, and military family members.
While officials have stated there is currently no evidence to suggest that any of the exposed data has been misused, they are providing identity protection and credit monitoring services to those affected. The full scope and potential implications of the breach are still under assessment.
This incident follows a separate cybersecurity event in which the FBI is investigating a breach of its jobs portal, FBIJobs.gov. In that case, a threat actor claimed responsibility for exposing personal information of FBI employees, including names, addresses, contact details, and Social Security numbers. The FBI is treating the situation with high seriousness, notifying impacted employees and advising them to remain vigilant against suspicious communications.