US Domestic — 2026-10-01

Pentagon Data Breach Exposes Personal Information of Nearly Three Million Military and Civilian Personnel

BLUFNine months of unattributed access to SSNs paired with military occupational data gives any adversary holding those files a ready-made targeting list that credit monitoring cannot mitigate.

A Defense Manpower Data Center file-sharing system exposed unencrypted personal data on about 2.76 million living and 294,000 deceased people, a U.S. defense official told ABC News 12. Stars and Stripes, citing Military Times, reported the access ran from October 2025 until the vulnerability was found and patched on July 16 2. A September 18 notification letter says a "small number of unauthorized users" reached Social Security numbers plus at least one other identifier, such as name, birth date, or military job information 2. A Pentagon official told Federal News Network the department has no indication of misuse, is providing 12 months of credit monitoring through IDX, and declined to say who accessed the data or why it was unencrypted 3.

Analysis
The Defense Department cannot currently say who holds the Social Security numbers and occupational data of roughly 3 million people, and that gap drives the counterintelligence and fraud exposure. The access window ran about nine months before the July 16 patch, and officials declined to say who accessed the files or why they were unencrypted. Absent attribution, affected personnel carry identity-theft and targeting risk that 12 months of credit monitoring does not cover. Occupational specialty data paired with SSNs gives a state actor a ready targeting list for specific career fields.

4 sources

Pentagon breach exposed sensitive data on nearly 3 million people - ABC News
Breach at Pentagon personnel database exposed data of millions - Stars and Stripes
More than 3 million people affected by military data breach - Federal News Network
Nearly 3 million people impacted by Defense Department data breach exposing sensitive information - theGrio