Hackers stole records of 2.8M US military personnel

Attackers exploited a vulnerability in a Pentagon file-sharing system over several months and stole unencrypted personal data of military personnel. According to DMDC, the breach affected about 2.8 million living people and nearly 300,000 deceased.

• Breach lasted from October 2025 to mid-July 2026
• About 2.8M living and 300K deceased people affected
• Stolen data includes SSNs, names, birth dates and service records
• Records were stored unencrypted