Pentagon Data Breach Exposure of Personal Records

The Defense Manpower Data Center (DMDC), one of the Pentagon's primary personnel record keepers, experienced a data breach where unauthorized users accessed unencrypted files. This breach involved a file-sharing system that maintains records for service members, civilian employees, contractors, retirees, veterans, and military families. The exposed data included Social Security numbers and other personal identifiers for more than three million people connected to the U.S. military.

The specific allegations center on the unauthorized access to unencrypted files containing sensitive personal information, including Social Security numbers, which occurred between October 2025 and July 16, 2026. The exposed data varied by individual but could include a name, date of birth, contact information, sex, race, or military occupational specialty. Because the files contained job details, the breach raised potential national security concerns.

Following the discovery of the security vulnerability, the DMDC patched the system. The Department of Defense is offering affected individuals one year of credit monitoring and identity-restoration services through a private company named IDX. The notice indicated that the department had no knowledge of any misuse of the information. The content does not provide specific instructions on how to participate in any resulting legal action.