Hackers stole Pentagon personnel records of over 3 million people
-
The Pentagon has begun notifying millions of military service members that their personal data was stolen in a breach of its human resources management system, which was discovered in October 2025. The compromised platform is operated by the Defense Manpower Data Center (DMDC), and the incident affects records belonging to over 3 million people.
According to the notifications, hackers gained access to and exfiltrated data held within the DMDC's systems. Affected individuals are being contacted directly as the Department of Defense works through the scale of the exposure, which ranks among the larger data breaches to hit U.S. military personnel records in recent years.
Details on the specific data elements taken, the intrusion vector, and any attributed threat actor have not been fully disclosed in the available reporting. No CVE identifier or advisory ID has been published in connection with this incident.
Those potentially affected should:
- Watch for official notification from the DMDC or Department of Defense
- Treat unexpected communications referencing military service details as suspicious
- Monitor financial and credit accounts for signs of identity theft or fraud
- Consider placing a credit freeze or fraud alert if notified of exposure
Source: BleepingComputer
If you or your organization work with defense personnel data, how are you approaching notification and identity monitoring in the wake of this breach?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login