Pentagon DMDC data breach impacts 3 million people

The Pentagon's Defense Manpower Data Center (DMDC) is notifying individuals that unauthorized users accessed a file-sharing server containing unencrypted personal data for roughly nine months, from October 2025 until the vulnerability was patched on July 16, 2026. A Department of War official told CNN the breach affects 2.76 million living and 294,000 deceased individuals.

• Unauthorized access lasted about nine months, from October 2025 to July 2026
• Exposed data included Social Security numbers, names, birth dates and contacts
• Breach affects 2.76 million living and 294,000 deceased individuals
• DMDC held at least 60 million records as of fiscal year 2024