Defense Manpower Data Center (Organization): news timeline & CVEs

Pentagon breach exposes personal data of more than 3 million people

Pentagon DMDC says a file-sharing flaw exposed unencrypted personal data, including SSNs, of about 3 million people.

The Pentagon’s Defense Manpower Data Center is notifying about 3.05 million people—2.76 million living and 294,000 deceased—that unauthorized users accessed unencrypted personal files. A file-sharing vulnerability, found on July 16, 2026, had allowed access since October 2025. Exposed data varied by person and included Social Security numbers, names, birth dates, contact details, demographics, and military job specialties. DMDC says it has no indication of misuse and is offering 12 months of free IDX credit monitoring.

Help Net Security12:21 UTC · 3h agoData breach in the wild 8 sources

Hackers stole millions of US military personnel records during months-long data breach

Hackers stole unencrypted personnel records, including Social Security numbers, for about 3.1 million people from the Pentagon's DMDC.

The Defense Manpower Data Center is notifying current and former U.S. military personnel that unauthorized users exploited a vulnerability in an unspecified file-sharing system between October 2025 and mid-July 2026. Stolen records were unencrypted and included names, Social Security numbers, dates of birth, sex, race, and military service details. A Pentagon official told CNN and Federal News Network that about 2.8 million living people and nearly 300,000 deceased people were affected. The Department of Defense said it has no indication the data was misused; the attackers have not been identified.

TechCrunch · Securityupdated 12:21 UTC · 3h agofirst Sep 30, 19:29 UTC · 20h agoData breach in the wild 8 sources3· 1 read

Three Million Affected in Pentagon Personnel Agency Data Breach

Pentagon's DMDC says unauthorized users accessed a file-sharing server for nine months, exposing unencrypted PII of about 3 million people.

The U.S. Defense Manpower Data Center (DMDC) is notifying 2.76 million living and 294,000 deceased individuals that a small number of unauthorized users accessed a file-sharing server between October 2025 and July 16, 2026, when a vulnerability was discovered and patched. The files held unencrypted PII including Social Security numbers plus names, dates of birth, contact details, sex, race, and military occupational data. DMDC, which held at least 60 million records in fiscal 2024, is offering 12 months of IDX credit monitoring with an enrollment deadline of August 19, 2027. No cybercrime group has claimed responsibility.

Security Affairsupdated 12:21 UTC · 3h agofirst Sep 29, 14:09 UTC · 2d agoData breach in the wild 8 sources

Pentagon Personnel Agency Data Breach Impacts 3 Million People

Pentagon's Defense Manpower Data Center breach exposed SSNs and PII of 3 million people after nine months of unauthorized file access.

The Defense Manpower Data Center is notifying individuals that unauthorized users accessed files on a file-sharing server containing unencrypted PII from October 2025 until discovery on July 16, 2026. A Department of War official said the breach impacts 2.76 million living and 294,000 deceased individuals. Exposed data included Social Security numbers, names, dates of birth, contact details, and military occupational specialties. There are no indications of misuse, and no group has claimed credit.

SecurityWeekupdated 12:21 UTC · 3h agofirst Sep 29, 12:25 UTC · 2d agoData breach in the wild 8 sources

Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People

Pentagon confirms a DMDC breach exposing SSNs and other data of about 3 million people.

The Pentagon confirmed unauthorized access to the Defense Manpower Data Center that exposed personal data tied to more than 3 million people, including 2.76 million living individuals and about 294,000 deceased people. A small number of unauthorized users reached unencrypted files through a file-sharing vulnerability from October 2025 until DMDC found and patched it on July 16, 2026. Exposed data can include names, Social Security numbers, dates of birth, contact details, and military occupational information. Officials say they have no evidence of misuse; notification letters dated September 18 offer one year of IDX credit monitoring.

GBHackersupdated 12:21 UTC · 3h agofirst Sep 29, 05:32 UTC · 2d agoData breach in the wild 8 sources

Pentagon Data Breach – Hackers Reportedly Accessed 3 Million People’s Sensitive Data

Pentagon confirmed a DMDC breach exposing unencrypted personal data, including Social Security numbers, of roughly three million people.

The Pentagon confirmed unauthorized access to a Defense Manpower Data Center file-sharing system between October 2025 and July 2026. Exposed records cover about 2.76 million living people and 294,000 deceased individuals, including names, Social Security numbers, dates of birth, contact details, and military occupational data stored without encryption. DMDC found the flaw on July 16, patched it, and is offering one year of credit monitoring through IDX. Officials have not identified the intruders and say there is no evidence the data has been misused.

Cyber Security Newsupdated 12:21 UTC · 3h agofirst Sep 29, 04:09 UTC · 2d agoData breach in the wild 8 sources

Pentagon data breach of military personnel raises national security concerns

Unauthorized access to a Pentagon HR server exposed Social Security numbers of current and former military personnel.

Reporting cited by DataBreaches.net says unauthorized users accessed a vulnerable server at the Pentagon’s Defense Manpower Data Center. The breach exposed Social Security numbers and other personal information of current and former military personnel. National security experts raised counterintelligence concerns. The published excerpt does not give a record count, a timeframe beyond the start of access, or a CVE.

DataBreaches.netupdated 12:21 UTC · 3h agofirst Sep 26, 11:47 UTC · 5d agoData breach in the wild 8 sources2· 2 reads

Defense Manpower Data Center

Timeline7 articles

Appears with