Marines sue Pentagon over DMDC breach of service-member data
Original title: Pentagon ignored cybersecurity flaws before data breach, Marines’ lawsuit says
The complaint says unencrypted files were exposed for about nine months before discovery on July 16.
Two Marines filed a class action in federal court in the District of Columbia over a Defense Manpower Data Center breach they say let scammers misuse their personal data. DMDC said in September that on July 16 it found a file-sharing vulnerability allowing unauthorized access to unencrypted files with full names, Social Security numbers, birth dates, and military occupations. The lawsuit alleges millions of files on service members and affiliates were exposed for about nine months. Plaintiffs Tristyn Edwards and Morgan Stampfli cite fraudulent charges and more spam.
Unconfirmed: The nine-month exposure and claim that the Pentagon ignored flaws come from the lawsuit, not DMDC's September statement.
- The suit was filed Tuesday in the District of Columbia.
- Plaintiffs are Marine veteran Tristyn Edwards and active-duty Marine Morgan Stampfli.
- DMDC said the file-sharing flaw was discovered on July 16.
- Exposed files included Social Security numbers and were unencrypted, DMDC said.
Impact: Unencrypted names, SSNs, birth dates, and occupations exposed
| Product | Affected |
|---|---|
| U.S. Department of Defense Defense Manpower Data Center file-sharing system | — |
- Countries
- United States
From the original article
2 min read at databreaches.netDaniel Terrill reports: A pair of Marines filed a class-action lawsuit Tuesday against the Pentagon over a data breach at the Defense Manpower Data Center, or DMDC, arguing it allowed scammers to obtain and use their personally identifiable information, or PII. In the complaint filed in federal court in the District of Columbia, Marine veteran...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.