Pentagon data breach overview:
- Who: The Defense Manpower Data Center (DMDC) is notifying people whose personal information was exposed in a data breach.
- Why: Unauthorized users accessed unencrypted files containing Social Security numbers and military personnel information between October 2025 and July 16, 2026.
- Where: The breach involved a DMDC file-sharing system that holds records on service members, civilian employees, contractors, retirees, veterans and military families.
A Pentagon data breach exposed the Social Security numbers and other personal information of more than 3 million people connected to the U.S. military. A defense official said the breach affected 2.76 million living people and another 294,000 who have died, according to a major news outlet.
Military Times first reported the breach on Sept. 24 after reviewing a notification letter sent to one affected individual. Two defense officials confirmed the letter was authentic, according to Military Times. The letter did not appear in an official public announcement.
The DMDC discovered a “security vulnerability” in a file-sharing system on July 16 and sent the notification on Sept. 18, Military Times reports.
Unauthorized users accessed files on a server containing unencrypted personal information from October 2025 until July 16, 2026, according to the letter. “Upon discovery, DMDC immediately remediated the vulnerability,” the defense official said, according to a major news outlet.
The DMDC is one of the Pentagon’s main personnel repositories, maintaining more than 60 million records on troops, civilian employees, contractors, retirees, veterans and military families.
Before the official count was released, two people familiar with the incident told Military Times that about 4 million Defense Department personnel may have been affected.
Pentagon data breach exposed military job specialties
According to the Military Times report, each affected person’s Social Security number was exposed along with at least one other identifier. That second identifier could be a name, date of birth, contact information, sex, race or military personnel information, including occupational specialty.
The exposed data varied from person to person, SecurityWeek reports. Because the files included details about the jobs military and civilian personnel performed, the breach could raise national security concerns, according to a major news outlet.
After discovering the problem, the DMDC patched the file-sharing system and restored it. The Defense Department is offering affected individuals one year of credit monitoring and identity-restoration services through IDX, a private company the department contracted, Military Times reports.
The notice states the department had no indication that the recipient’s information had been misused. The Defense Department and DMDC did not immediately respond to questions about who accessed the files.
In other recent data breaches, health records company Veradigm disclosed a cybersecurity incident involving one of its third-party vendors, its second data breach within a year.
What do you think about this Pentagon data breach? Let us know in the comments.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
