Hackers Stole Pentagon Personnel Records of Over 3 Million People

### Executive summary: The Defense Manpower Data Center (DMDC) notified more than 3 million people that attackers exploited a vulnerability in a file‑sharing system to access unencrypted personally identifiable information (SSNs, names, dates of birth, contact details, and military personnel information) from October 2025 until discovery on July 16, 2026; DMDC patched the vulnerability, is offering affected individuals credit monitoring, and issued remediation and hardening recommendations for DoD administrators.