The Pentagon’s Defense Manpower Data Center says attackers accessed a file-sharing server and exposed personal data for about 3 million living and deceased people tied to Department of Defense records. DMDC says unauthorized users accessed files between October 2025 and July 16, 2026 through an unspecified vulnerability in a file-sharing system that was patched after discovery. Exposed unencrypted personal information included Social Security numbers, names, dates of birth, contact details, demographic data, and military occupational specialties.
Why it matters: This affects military and civilian personnel, contractors, family members, retirees, and veterans whose identity data could be used for fraud or targeting. Potentially affected people should watch for official notices, consider credit monitoring and fraud alerts, and treat follow-on phishing or impersonation attempts as high risk.
Eduard Kovacs
2026.09.29
100% relevant
This article appears to be the first concrete report establishing the DMDC breach, its timeline, and its approximate scale.
← Back to all stories