Pentagon Data Breach Exposes Unencrypted SSNs of 3 Million Military Personnel

The Pentagon's Defense Manpower Data Center (DMDC) suffered a severe data breach exposing the personal information of 2.76 million living and 294,000 deceased individuals. Unauthorized users exploited a security vulnerability in a file-sharing system, maintaining undetected access to an affected server between October 2025 and July 2026. The compromised files were stored entirely unencrypted and contained names, Social Security numbers, dates of birth, contact details, and specific military occupational specialties. Defense officials have not publicly identified the attackers or their motive, leaving the long-term counterintelligence risk of the stolen military profiles difficult to measure. Victims began receiving official notification letters on September 18 and are being offered one year of free credit monitoring and identity-restoration services through a private contractor.