Pentagon breach exposes personal data of more than 3 million people

The Pentagon’s Defense Manpower Data Center (DMDC) notified millions of individuals that a security vulnerability in a DMDC file-sharing system allowed unauthorized access to unencrypted personally identifiable information between October 2025 and discovery on July 16, 2026; about 2.76 million living persons and 294,000 deceased records were affected, exposing SSNs and other sensitive data. DMDC says it has no indications of misuse, is offering 12 months of credit monitoring, and has not disclosed the identity of the intruders.