Defense Manpower Data Center (Victim): news timeline & CVEs

Pentagon breach exposes personal data of more than 3 million people

Pentagon DMDC says a file-sharing flaw exposed unencrypted personal data, including SSNs, of about 3 million people.

The Pentagon’s Defense Manpower Data Center is notifying about 3.05 million people—2.76 million living and 294,000 deceased—that unauthorized users accessed unencrypted personal files. A file-sharing vulnerability, found on July 16, 2026, had allowed access since October 2025. Exposed data varied by person and included Social Security numbers, names, birth dates, contact details, demographics, and military job specialties. DMDC says it has no indication of misuse and is offering 12 months of free IDX credit monitoring.

Help Net Security12:21 UTC · 3h agoData breach in the wild 8 sources

Hackers stole millions of US military personnel records during months-long data breach

Hackers stole unencrypted personnel records, including Social Security numbers, for about 3.1 million people from the Pentagon's DMDC.

The Defense Manpower Data Center is notifying current and former U.S. military personnel that unauthorized users exploited a vulnerability in an unspecified file-sharing system between October 2025 and mid-July 2026. Stolen records were unencrypted and included names, Social Security numbers, dates of birth, sex, race, and military service details. A Pentagon official told CNN and Federal News Network that about 2.8 million living people and nearly 300,000 deceased people were affected. The Department of Defense said it has no indication the data was misused; the attackers have not been identified.

TechCrunch · Securityupdated 12:21 UTC · 3h agofirst Sep 30, 19:29 UTC · 19h agoData breach in the wild 8 sources3· 1 read

Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People

Pentagon confirms a DMDC breach exposing SSNs and other data of about 3 million people.

The Pentagon confirmed unauthorized access to the Defense Manpower Data Center that exposed personal data tied to more than 3 million people, including 2.76 million living individuals and about 294,000 deceased people. A small number of unauthorized users reached unencrypted files through a file-sharing vulnerability from October 2025 until DMDC found and patched it on July 16, 2026. Exposed data can include names, Social Security numbers, dates of birth, contact details, and military occupational information. Officials say they have no evidence of misuse; notification letters dated September 18 offer one year of IDX credit monitoring.

GBHackersupdated 12:21 UTC · 3h agofirst Sep 29, 05:32 UTC · 2d agoData breach in the wild 8 sources

Pentagon Data Breach – Hackers Reportedly Accessed 3 Million People’s Sensitive Data

Pentagon confirmed a DMDC breach exposing unencrypted personal data, including Social Security numbers, of roughly three million people.

The Pentagon confirmed unauthorized access to a Defense Manpower Data Center file-sharing system between October 2025 and July 2026. Exposed records cover about 2.76 million living people and 294,000 deceased individuals, including names, Social Security numbers, dates of birth, contact details, and military occupational data stored without encryption. DMDC found the flaw on July 16, patched it, and is offering one year of credit monitoring through IDX. Officials have not identified the intruders and say there is no evidence the data has been misused.

Cyber Security Newsupdated 12:21 UTC · 3h agofirst Sep 29, 04:09 UTC · 2d agoData breach in the wild 8 sources

Defense Manpower Data Center

Timeline4 articles

Appears with

Pentagon breach exposes personal data of more than 3 million people

Hackers stole millions of US military personnel records during months-long data breach

Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People

Pentagon Data Breach – Hackers Reportedly Accessed 3 Million People’s Sensitive Data