< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 12 sources · 21 days · First seen · Last updated

Pentagon Defense Manpower Data Center breach

Overview

A significant cybersecurity breach occurred at the Defense Manpower Data Center (DMDC), exposing the personal information of approximately 2.76 million living U.S. military and civilian personnel, as well as roughly 294,000 deceased individuals.

Unauthorized users exploited a file-sharing vulnerability to access unencrypted files between October 2025 and July 2026. The compromised data includes Social Security numbers, dates of birth, demographic information, employment details, and military service records. Officials noted that the exposure of military occupational specialties presents a specific risk, as it could allow foreign intelligence agencies to identify personnel of strategic value.

While the vulnerability was discovered in July 2026, those affected were not notified until September. Although the Department of Defense stated there is no evidence that the exposed information has been misused, the duration of the undetected access has raised concerns regarding the security of the DMDC, which manages approximately 60 million records for service members, contractors, and their families.

Entities

Department of Defense · Defense Manpower Data Center · Pentagon · FBI · ShinyHunters

Timeline

  1. [TECHNOLOGY] 4 sources
    Pentagon confirms data breach affecting 3 million military records

    A nine-month undetected breach of the Pentagon's Defense Manpower Data Center has exposed the unencrypted personal records of approximately 3 million military personnel and their families.

  2. [TECHNOLOGY] 8 sources
    Pentagon data breach exposes 2.7 million military personnel records

    A data breach at the Defense Manpower Data Center exposed the personal information, including Social Security numbers, of over 2.7 million living U.S. military and civilian personnel.

Sources

ascii.jp · erdalozkaya.com · espiganoticias.net · gizmodo.com · justthenews.com · lifezette.com · navytimes.com · on.rt.com · rocketnews.com · science.slashdot.org · weekly.ascii.jp · worthynews.com