Data Breach Exposes Personal Information of Millions of U.S. Military Personnel

The U.S. government has informed millions of current and former military service members that their personal information was compromised during a significant data breach of the Pentagon’s personnel records. This breach is part of a troubling trend of data thefts involving federal workers' information.

According to a notification from the Defense Manpower Data Center (DMDC), several unauthorized users exploited a security vulnerability in a file-sharing system over several months, from October 2025 to mid-July 2026. The breach exposed sensitive personally identifiable information, including Social Security numbers, names, dates of birth, sex, race, and details about military service. Notably, the personnel records were unencrypted, raising concerns about the security of such critical data.

Reports indicate that approximately 2.8 million living individuals and nearly 300,000 deceased individuals were affected by this breach. As of March, the U.S. military had about 1.3 million active service members, highlighting the extensive impact of this incident.

The DMDC, while not widely recognized by the public, plays a crucial role within the Department of Defense by maintaining over 60 million records for military and civilian personnel and their families. This includes managing benefits and entitlements such as healthcare and retirement. The DMDC also serves as the military’s primary identity management provider, linking service members and employees to credentials necessary for accessing Pentagon systems and facilities.

Department of Defense's Response to Breach

Despite the breach, the Department of Defense has stated that there is no indication that the stolen information has been misused. However, the specifics of how this conclusion was reached remain unclear. TechCrunch reached out to a Pentagon spokesperson for further clarification on whether there had been any communication from the hackers, but no response was received.

Approved for Dissemination

This incident follows a recent breach at the FBI attributed to the ShinyHunters hacking group, which claimed to have accessed personal information of FBI agents and staff. The implications of such breaches are severe, as they pose risks of foreign governments potentially using the stolen data to profile or coerce federal employees.

The recent breaches echo past incidents, such as the 2015 breach of the Office of Personnel Management, which resulted in the theft of records from over 22 million government employees, many with security clearances. The ongoing vulnerabilities in federal data security raise significant concerns about the protection of sensitive information and the potential for misuse by malicious actors.