Pentagon Data Breach Affects Millions of Military Personnel
An unauthorized breach has occurred within the Pentagon's personnel management system, leading to the exposure of sensitive data for millions of military members. The incident was revealed in recent reports.
The U.S. Department of Defense has confirmed a significant data breach affecting the information of millions of military personnel. The breach occurred within the Pentagon's Defense Manpower Data Center (DMDC), responsible for managing personnel data.
According to officials, unauthorized actors gained access to a DMDC server in October 2025. This server held sensitive information for 2.76 million living individuals and 294,000 deceased persons. The DMDC manages over 60 million data records annually, suggesting the leaked data represents a fraction of the total. A security vulnerability that allowed access was discovered in July 2026 and has since been rectified.
The exposed data included Social Security numbers, names, birth dates, contact information, and military career details, among other specifics depending on the individual. The Department of Defense has stated there is no indication that the leaked information has been misused. However, such data can be valuable to foreign intelligence agencies for targeted phishing or extortion attempts.
The perpetrators behind the breach have not yet been identified, and the Pentagon has not provided further comment to CNN. This incident follows a separate breach where the cybercriminal group ShinyHunters stole data pertaining to tens of thousands of FBI employees from a job portal.