The Pentagon says 'hold my beer,' falls victim to massive data breach affecting roughly 3,000,000 people

The Pentagon has confirmed a significant data breach affecting around 3 million individuals, according to a recent US defense official. This incident, which occurred between October 2025 and July 2026, involved unauthorized access to the Defense Manpower Data Center (DMDC) information system. The DMDC serves as a primary repository for personnel records, including active-duty and reserve troops, as well as civilian employees, contractors, and military veterans.

The breached data includes Social Security numbers, military and civilian job positions, and the occupational specialties of military service members. Despite the magnitude of the breach, defense officials have not found any evidence that the exposed information has been misused. The DMDC holds records on over 60 million people, so the affected 3 million represent roughly one in twenty of the total individual records compromised.

Once the unauthorized access was discovered, the DMDC immediately remediated the vulnerability. The stolen data was not encrypted, which could make it easier for hackers to cross-reference it with other leaked information. So far, no hacking group has claimed responsibility for the breach. However, the incident highlights a potential escalation in the capabilities of cyber adversaries targeting US government information.

This breach follows a recent data breach at the FBI, where a hacking group claimed to have stolen data on all FBI employees. As the year progresses, the frequency and scale of such breaches raise concerns about the ability of US government agencies to protect sensitive information from increasingly sophisticated cyber threats.