Pentagon gets pwned as breach exposes sensitive data on nearly three million military and civilian personnel
Hackers have breached the U.S. Department of Defense's information systems. The Pentagon says that it has already secured the source of the leak, but the records of millions of DoD personnel are now in the wild.
The Department of Defense's Defense Manpower Data Center (DMDC) suffered a data breach spanning from October 2025 to July 2026, potentially exposing sensitive personal details of nearly three million military and civilian personnel. The compromised records included Social Security numbers and job specifics for both active and retired military personnel, as well as civilian employees, contractors, retirees, veterans, and military family members.
The DMDC, a critical database for the Pentagon, stores over 60 million records, making this breach potentially severe, compromising the privacy and security of affected individuals. Despite assurances from a U.S. defense official that no misuse of the stolen data has been reported, the information could still pose risks, particularly for those in sensitive national security roles.
The breach remains unattributed, and authorities have not disclosed how the vulnerability was uncovered. While the Pentagon claims it has remedied the issue, the exposure of such sensitive data leaves affected individuals vulnerable to exploitation by criminals, intelligence services, and other threat actors. As governments increasingly depend on digital systems for their operations, the likelihood of adversaries and even allies probing for vulnerabilities in these systems is high.
Written by urgent.news from Tom's Hardware's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
