Washington: A major cybersecurity breach has raised fresh concerns over the protection of sensitive U.S. military data after unauthorized users gained access to a Pentagon personnel database containing information linked to nearly 3.05 million people.
The compromised system is operated by the Defense Manpower Data Center (DMDC), which maintains personnel records for the U.S. Department of Defense. The affected population reportedly includes about 2.76 million living individuals and 294,000 deceased individuals. Importantly, the figure does not represent only serving military personnel; it also covers former service members, civilian employees and others connected with the Defense Department.
According to U.S. defense officials, unauthorized access to the system occurred between October 2025 and July 2026. The vulnerability was discovered in July, following which the Pentagon moved to secure the affected system and investigate the incident.
The exposed information reportedly included names, Social Security numbers, dates of birth and contact details. In some cases, records also contained military-related information such as an individual’s occupational specialty.
A breach of the Pentagon’s sprawling personnel database exposed sensitive information belonging to a massive swath of military personnel, including Social Security numbers and details about the jobs they held, according to a U.S. defense official.https://t.co/Z0hXSH402O pic.twitter.com/0MaaOj60OG
— ABC News (@ABC) September 29, 2026
The exposure of military occupational information has added a national-security dimension to the incident. Such data could potentially be combined with information from other sources to build detailed profiles of people associated with the U.S. defense establishment. However, officials have not publicly established that the information has been misused.
The identity of the hackers or unauthorized users also remains unclear. No public evidence has established that a particular foreign government or hacking group was responsible, and authorities have not publicly confirmed the motive behind the intrusion.
The scale of the incident is significant because DMDC maintains a much larger database containing information on more than 60 million people associated with the U.S. military and Defense Department, including service members, civilians, contractors, family members, retirees and veterans.
The Pentagon is providing affected individuals with identity-protection assistance and credit-monitoring services. The incident has nevertheless renewed questions about cybersecurity safeguards surrounding databases containing highly sensitive military and personal information.
For now, the breach stands as a major warning about the potential consequences of unauthorized access to large government personnel databases, particularly when personal identifiers are combined with information revealing an individual’s connection to the defense establishment.
