IDX (Organization): news timeline & CVEs

Pentagon breach exposes personal data of more than 3 million people

Pentagon DMDC says a file-sharing flaw exposed unencrypted personal data, including SSNs, of about 3 million people.

The Pentagon’s Defense Manpower Data Center is notifying about 3.05 million people—2.76 million living and 294,000 deceased—that unauthorized users accessed unencrypted personal files. A file-sharing vulnerability, found on July 16, 2026, had allowed access since October 2025. Exposed data varied by person and included Social Security numbers, names, birth dates, contact details, demographics, and military job specialties. DMDC says it has no indication of misuse and is offering 12 months of free IDX credit monitoring.

Help Net Security12:21 UTC · 4h agoData breach in the wild 9 sources

Hackers stole Pentagon personnel records of over 3 million people

Hackers stole Pentagon personnel records, including Social Security numbers, for more than 3 million people.

The Pentagon’s Defense Manpower Data Center is notifying military personnel that unauthorized users accessed its human-resources system from October 2025 to July 2026 by exploiting a file-sharing vulnerability. Stolen data varies by person and can include Social Security numbers, names, dates of birth, contact details, sex, race, and military personnel information. Officials said more than 3 million people are affected, including nearly 2.8 million living individuals and 294,000 deceased. DMDC is offering 12 months of IDX credit monitoring, with enrollment required by August 19, 2027.

BleepingComputerupdated 12:21 UTC · 4h agofirst 09:44 UTC · 6h agoData breach in the wild 9 sources1

Three Million Affected in Pentagon Personnel Agency Data Breach

Pentagon's DMDC says unauthorized users accessed a file-sharing server for nine months, exposing unencrypted PII of about 3 million people.

The U.S. Defense Manpower Data Center (DMDC) is notifying 2.76 million living and 294,000 deceased individuals that a small number of unauthorized users accessed a file-sharing server between October 2025 and July 16, 2026, when a vulnerability was discovered and patched. The files held unencrypted PII including Social Security numbers plus names, dates of birth, contact details, sex, race, and military occupational data. DMDC, which held at least 60 million records in fiscal 2024, is offering 12 months of IDX credit monitoring with an enrollment deadline of August 19, 2027. No cybercrime group has claimed responsibility.

Security Affairsupdated 12:21 UTC · 4h agofirst Sep 29, 14:09 UTC · 2d agoData breach in the wild 9 sources

Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People

Pentagon confirms a DMDC breach exposing SSNs and other data of about 3 million people.

The Pentagon confirmed unauthorized access to the Defense Manpower Data Center that exposed personal data tied to more than 3 million people, including 2.76 million living individuals and about 294,000 deceased people. A small number of unauthorized users reached unencrypted files through a file-sharing vulnerability from October 2025 until DMDC found and patched it on July 16, 2026. Exposed data can include names, Social Security numbers, dates of birth, contact details, and military occupational information. Officials say they have no evidence of misuse; notification letters dated September 18 offer one year of IDX credit monitoring.

GBHackersupdated 12:21 UTC · 4h agofirst Sep 29, 05:32 UTC · 2d agoData breach in the wild 9 sources

Pentagon Data Breach – Hackers Reportedly Accessed 3 Million People’s Sensitive Data

Pentagon confirmed a DMDC breach exposing unencrypted personal data, including Social Security numbers, of roughly three million people.

The Pentagon confirmed unauthorized access to a Defense Manpower Data Center file-sharing system between October 2025 and July 2026. Exposed records cover about 2.76 million living people and 294,000 deceased individuals, including names, Social Security numbers, dates of birth, contact details, and military occupational data stored without encryption. DMDC found the flaw on July 16, patched it, and is offering one year of credit monitoring through IDX. Officials have not identified the intruders and say there is no evidence the data has been misused.

Cyber Security Newsupdated 12:21 UTC · 4h agofirst Sep 29, 04:09 UTC · 2d agoData breach in the wild 9 sources

IDX

Timeline5 articles

Appears with

Pentagon breach exposes personal data of more than 3 million people

Hackers stole Pentagon personnel records of over 3 million people

Three Million Affected in Pentagon Personnel Agency Data Breach

Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People

Pentagon Data Breach – Hackers Reportedly Accessed 3 Million People’s Sensitive Data