Pentagon breach of 3M records went undetected for nine months

Unauthorized access to Defense Manpower Data Center records lasted from October 2025 until July 16, 2026, when a vulnerability in a file-sharing system was found. About 3 million people were affected, including 2.76 million living and 294,000 deceased individuals; unencrypted SSNs and personal data were exposed.

• Unauthorized access to DMDC data went undetected for about nine months
• About 3 million people affected, including 294,000 deceased
• Unencrypted SSNs, names and birth dates were exposed
• Affected individuals offered one year of credit monitoring