Pentagon Personnel Database Breached, Exposing Millions of Records
Sensitive personal information of millions of military personnel and their families was compromised in a monthslong breach of a Defense Department database.
A significant data breach at the Defense Department’s human resources database has exposed the personal information of approximately 2.76 million living individuals and 294,000 deceased individuals. The compromised data includes sensitive details such as Social Security numbers and job information, according to reports citing unidentified Pentagon officials.
The breach, which reportedly occurred over several months, was first disclosed by the publication Military Times, which obtained a notification letter sent to an affected individual. The Defense Manpower Data Center (DMDC), responsible for collecting personnel and manpower data for the Defense Department, is the affected agency.
Details of the Breach
The DMDC's systems were found to have a security vulnerability on July 16. The breach is believed to have occurred between October 2025 and the discovery date. The type of personal information accessed varies and could include names, dates of birth, and contact information. While the DMDC has updated its file-sharing system to address the vulnerability, it is unclear who was behind the incident or the full extent of the data accessed.
Experts warn that such large-scale breaches pose significant security risks, potentially making individuals more vulnerable to phishing attempts and other forms of identity theft, especially if the data falls into the hands of foreign actors.
Support and Remediation
In response to the breach, the DMDC is offering affected personnel one year of credit monitoring and identity restoration services through a private firm. The Federal Trade Commission advises individuals to consider placing a free credit freeze with the major credit bureaus—Equifax, Experian, and TransUnion—to protect against identity theft. Active duty and National Guard members are eligible for free electronic credit monitoring services.
This incident is part of a broader trend of cybersecurity challenges affecting government agencies. The FBI is also investigating a separate breach impacting its jobs website, allegedly carried out by the hacking group ShinyHunters. This attack reportedly compromised sensitive data on nearly all FBI agents and job applicants, raising concerns about national security due to details related to intelligence and counterespionage work possibly being exposed.