Hackers Breach Pentagon HR System, Stealing Data of 3 Million People
Hackers breach the Pentagon's Defense Manpower Data Center (DMDC) human resources management system, stealing sensitive data from more than 3 million people, including nearly 2.8 million living individuals and 294,000 deceased individuals. The attackers exploit a vulnerability in the DMDC's file-sharing systems, maintaining unauthorized access between October 2025 and July 2026.
The stolen data varies by individual but includes Social Security numbers, names, dates of birth, contact information, sex, race, and military personnel information. Upon discovering the vulnerability, the DMDC initiates privacy and cybersecurity incident response actions and works to enhance the security posture of its systems. The Pentagon also offers affected individuals 12 months of free credit monitoring through IDX, with enrollment required by August 19, 2027.
The DMDC, founded in 1974, stores more than 60 million records covering military members, civilians, contractors, family members, retirees, and veterans, supporting benefits, entitlements, and other Defense Department programs. This incident follows another massive breach claimed by the ShinyHunters extortion gang, underscoring ongoing security concerns around large-scale data systems.