Breaches and incidentsBriefReported by a reputable outlet, citing the company
Pentagon DMDC breach: about 3 million personnel records
A vulnerability in a Defense Manpower Data Center file-sharing system let a “small number of unauthorized users” reach a server with unencrypted PII...
- Disclosed
What happened
- A vulnerability in a Defense Manpower Data Center file-sharing system let a “small number of unauthorized users” reach a server with unencrypted PII between Oct 2025 and 16 Jul 2026. ABC (via Stars and Stripes) cites 2.76M living and 294,000 deceased people; Military Times sources say closer to 4M. SSNs plus other identifiers.
- Technique: unnamed file-sharing vulnerability, patched on discovery.
- Attribution: not disclosed.
- Response: letters from 18 Sep; one year of credit monitoring; no misuse detected so far.
Sources
- https://www.stripes.com/theaters/us/2026-09-29/data-breach-pentagon-personnel-records-23001764.html
- https://abc30.com/story/pentagon-news-breach-exposed-sensitive-data-3-million-people/19888280/
- https://federalnewsnetwork.com/defense-main/2026/09/more-than-3-million-people-affected-by-military-data-breach/
- https://www.securityweek.com/pentagon-personnel-agency-data-breach-impacts-3-million-people/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.