Authorization to access sensitive personnel records was granted to unauthorized users at a major Pentagon database between October 2025 and July 2026, affecting approximately 3.05 million individuals, according to a U.S. defense official.
The compromise at the Defense Manpower Data Center (DMDC) included personally identifiable information such as Social Security numbers and details regarding the occupations held by military personnel, civilians, contractors, retirees, veterans, and their families. The data breach impacted 2.76 million living people and an additional 294,000 deceased individuals.
The DMDC functions as a primary repository for the Pentagon, maintaining over 60 million personnel files. A defense official confirmed that upon discovering the vulnerability in July, the center immediately took steps to remediate the system. As of now, officials stated there is no evidence indicating that the exposed data has been misused.
To assist those affected, the Department of Defense is providing identity protection services and credit monitoring resources. The scope of the breach raises potential national security concerns due to the inclusion of specific job role information held by service members and civilian staff.
This development coincides with a separate cybersecurity incident involving the Federal Bureau of Investigation. The FBI recently notified employees of a breach at its job application portal, FBIJobs.gov, which is classified as an unclassified system.
According to sources, a threat actor claimed responsibility for the FBI incident and threatened to release data containing employees’ names, home addresses, contact information, Social Security numbers, dates of birth, and emergency contacts. The bureau is proceeding under the assumption that all FBI employee personal information has been compromised.
The FBI has issued warnings to impacted staff, advising them to remain vigilant against suspicious calls and to refrain from speaking to the media. Employees who are potentially affected will receive internal briefings, and the bureau has instructed staff to contact 911 if they encounter individuals trespassing or approaching them regarding the incident.
This is alarming. Between the Pentagon and FBI breaches, I worry about how fragile our national security infrastructure actually is.
Can they really include the dead? That feels like a grim detail we never expect to see in these reports.