Pentagon Confirms 2.8 Million Military Personnel Records Stolen in Defense Manpower Data Center Breach

Analysis
Washington is very unlikely to publicly name a state or criminal actor behind the breach by December 31. Officials have not said who accessed the files, whether the intrusion was deliberate, or why the records were unencrypted, and no group has claimed the theft. Five outlets converge on the figures, but most appear to rely on one Pentagon statement and notification letter, so agreement reflects shared origin, not independent verification. The on-record confirmation of counts changes nothing on attribution. Silence may instead reflect an ongoing or classified attribution process that concludes after year-end. Confidence is moderate: reporting is consistent on facts but silent on the intruders, and the "no misuse" claim has no stated basis. Absent attribution, agencies should assume adversary services hold the occupational data and extend identity protection beyond the 12-month IDX offer.