Pentagon Says DMDC Breach Exposed Personal Data of Millions
Summary
The Pentagon says a breach of Defense Manpower Data Center records exposed personal information belonging to 2.76 million living people and 294,000 deceased individuals. The attackers reportedly accessed the system from October 2025 to July 2026.
Key points
- The Pentagon confirmed the breach affected 2.76 million living individuals and potentially 294,000 deceased individuals.
- Cybercriminals reportedly had access to the records from October 2025 to July 2026.
- The attackers reportedly exploited a vulnerability in an unspecified file-sharing system.
- Exposed information reportedly includes Social Security numbers, names, birth dates, sex, race, and military service details; some records also contained contact information and occupational specialties.
- The Pentagon says it has no indication the information was misused, but the article notes it has not explained that assessment.
- The Pentagon is offering affected people 12 months of credit monitoring; recommended precautions include credit freezes and caution around targeted phishing.
Article Details
- Victim Organization
- Defense Manpower Data Center (DMDC)
- Incident Type
- Unauthorized access to and theft of personal information from personnel records
- Data Types Exposed
- Social Security numbers
- Names
- Dates of birth
- Sex
- Race
- Service details
- Contact information (in some records)
- Occupational specialty (in some records)
- Affected Records
- The Pentagon reportedly confirmed that 2.76 million living individuals and 294,000 deceased individuals were affected.
- Operational Impact
- A small number of unauthorized users accessed files on a server containing unencrypted personally identifiable information. The Pentagon said it had no indication of misuse, while the article notes that future misuse was not ruled out. No service disruption was reported.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed
Countries
Industries
DefenseThe US government is alerting millions of people that their personal information was stolen during a breach of the Pentagon’s personnel records at the Defense Manpower Data Center (DMDC).GovernmentThe US government is alerting millions of people that their personal information was stolen during a breach of the Pentagon’s personnel records at the Defense Manpower Data Center (DMDC).