Hackers stole millions of US military personnel records during months-long data breach
The Defense Manpower Data Center disclosed that unauthorized users exploited a file-sharing vulnerability from October 2025 to July 2026. The breach exposed unencrypted records for 2.8 million living and 300,000 deceased individuals, including Social Security numbers. The Pentagon states it has no indication of misuse, though it did not explain how it reached that conclusion.
The Defense Manpower Data Center confirmed that unauthorized actors exploited a flaw in a file-sharing system. This exploitation occurred continuously from October 2025 through mid-July 2026. The specific technical details of the bug remain unidentified. The personnel records involved were stored without encryption during this period. Approximately 2.8 million living individuals and 300,000 deceased people had their data accessed. The disclosure includes names, dates of birth, sex, race, and Social Security numbers. The Defense Manpower Data Center maintains over 60 million records for military staff and family members. The Pentagon officials did not specify how they determined the scope of exposure. Current and former service members received notifications regarding the theft of their personal information. The Department of Defense claims there is no indication of misuse. However, agency officials did not explain how they reached that conclusion. The identities of the hackers involved in this specific incident remain unknown to the public.