Science & Tech · Cybersecurity · 1 hr ago
Pentagon data breach affected more than 3 million people
Unauthorized users accessed personal information held by the Defense Manpower Data Center, a Defense Department system, from October 2025 to July 2026.
A department official said 2.76 million living people and 294,000 deceased people were affected.
The records may belong to service members, veterans, civilian employees, contractors, family members and retirees.
Depending on the person, information exposed could include Social Security numbers, names, birth dates, contact details and military personnel information.
The files were not encrypted, and the department says it has no indication that the information has been misused.
People whose information was accessed are being notified by mail and offered credit monitoring and identity restoration support.
Those who receive a notice can check its details and contact the department’s contracted provider, IDX, for help.
A breach at the Pentagon’s Defense Manpower Data Center affected 2.76 million living people and 294,000 deceased people, a War Department official told CyberGuy.
The records accessed contained unencrypted personally identifiable information, which may include Social Security numbers, names, birth dates and military personnel details.
Unauthorized access occurred between October 2025 and July 2026, and the department says it has no indication the information was misused.
People whose information was accessed are being notified by postal mail and offered support through the department’s contracted provider, IDX.
- Who
- The breach affected 2.76 million living people and 294,000 deceased people with military connections.
- What
- Unauthorized users accessed personally identifiable information held by the Defense Manpower Data Center.
- When
- The unauthorized access occurred between October 2025 and July 2026.
- Where
- The breach involved an information system at the Defense Manpower Data Center.
- Why
- Not stated
This story does not have two clearly opposing sides.
Unauthorized users accessed personally identifiable information in a Defense Manpower Data Center system.
The department says it remediated the vulnerability.
- Living individuals affected
- 2.76 million
- Deceased individuals affected
- 294,000
- Unauthorized access period
- October 2025 to July 2026
- Records maintained by DMDC
- More than 60 million
- Notification provider
- Identity Theft Guard Solutions (IDX)
Sources
Related news
Cyberattack defrosts refrigerators at French supermarket chains
Ledger confirms tampered wallets linked to CryptoBilis fund thefts
Malware incident at contractor may expose 8.7 million karaoke records
Critical SonicWall flaw faces exploitation days after patch
Canadian cybersecurity executive arrested on federal extortion charges
Identity systems are a key part of cyber recovery planning
Canadian cybersecurity executive arrested in FBI ShinyHunters investigation
Cyberattack disrupts refrigeration systems at French supermarkets
Albert Heijn systems remain offline after cybersecurity incident
Attacks disrupt Yandex services and its data centers in Russia
Ricardo users receive phishing messages after data leak
