Highly Sensitive Data of 3 Million in the People in the Pentagon's System Accessed by "Unauthorized Users"

The Pentagon sent out letters to affected individuals explaining that their Defense Manpower Data Center (DMDC) was accessed by "unauthorized users," exposing the highly sensitive personal data of millions of military personnel.

The DMDC acts as a central source of personal information for everyone employed by the Department of War, including active-duty service member, civilians working for the DoW, veterans, retirees, family members, etc.

Personal records of over 60 million people are maintained in the DMDC, although nothing suggests that all of those records were accessed.

The types of data accessed include Social Security Numbers (SSN), names, dates of birth, contact information, sex, race, and military personnel information such as occupational specialty.

The Pentagon didn't identify who the "unauthorized users" were or what their motives were, but the DoW is a highly valuable target for everyone from scammers looking to steal the identities of military personnel to state-level actors.

The data was accessed for about 9 months between October 2025 and the discovery on July 16, 2026 and it was stored completely unencrypted. The letter describes how they responded to the incident:

Upon discovery of the security vulnerability, DMDC immediately initiated privacy and cybersecurity incident response actions in accordance with Office of Management and Budget and Department guidelines and policies. We are taking appropriate actions to assess and enhance the cybersecurity posture of the DMDC system.

The lengthy access period is concerning especially considering how important the data is and how long it will affect the people involved. Your SSN is really difficult to change, the consequences of a data breach like this could be felt for the rest of the victims' lives.

According to CSN, 2.76 million living individuals and around 294,000 deceased individuals were affected by the breach.

Affected people are being offered a year of free credit monitoring services through IDX to deal with the potential for identity theft.

Officials say there's not evidence that the data has been misused yet, but that doesn't mean it won't be in the future.