Pentagon Personnel Agency Data Breach Impacts 3 Million People

The Defense Manpower Data Center (DMDC), which manages personnel records for the Department of Defense, suffered a data breach exposing personal information of approximately 3 million individuals. Unauthorized access occurred via a file-sharing server vulnerability that was active for about nine months before being patched in July 2026. Exposed data included unencrypted personally identifiable information (PII) such as Social Security numbers, names, dates of birth, contact details, demographic data, and military occupational specialties. There are currently no indications of misuse of the accessed information. The breach affects both living and deceased individuals, but the responsible party remains unknown.

• securityweek.com/pentagon-personnel-agency-data-breach-impacts-3-million-people/ (opens in a new tab)