Pentagon Says Hackers Stole Data on More Than 3 Million People
Summary
The Pentagon says attackers exploited a vulnerability in DMDC file-sharing systems and accessed data on more than 3 million people, including Social Security numbers and military records. DMDC is offering 12 months of credit monitoring.
Key points
- DMDC says unauthorized users accessed sensitive data from October 2025 through July 2026 after exploiting a vulnerability in its file-sharing systems.
- The breach affects more than 3 million people, including nearly 2.8 million living individuals and 294,000 deceased individuals.
- Exposed information varies by person and may include Social Security numbers, names, birth dates, contact details, and military personnel information.
- DMDC says it began privacy and cybersecurity incident-response actions after discovering the vulnerability.
- Affected individuals can enroll in 12 months of credit monitoring through August 19, 2027.
Article Details
- Victim Organization
- Defense Manpower Data Center (DMDC)
- Incident Type
- Unauthorized access and data theft after exploitation of a vulnerability in DMDC file-sharing systems
- Data Types Exposed
- Social Security numbers
- Names
- Dates of birth
- Contact information
- Sex
- Race
- Military personnel information
- Affected Records
- More than 3 million people, including nearly 2.8 million living individuals and 294,000 deceased individuals
- Operational Impact
- DMDC initiated privacy and cybersecurity incident-response actions and said it is assessing and enhancing the system’s cybersecurity posture. No service disruption is reported.
- Ransom Or Extortion
- No ransom or extortion activity is reported for the DMDC incident.
- Claim Status
- confirmed