Pentagon Data Breach Exposes Military Personnel Information

Cnn

Pentagon Data Breach Exposes Military Personnel Information

First seen 25 Sep 2026, 21:24 UTC • •65.3

Article Content

1 / 3

Browse articles

ThreatCluster •September 25, 2026 at 21:54 UTC

•Unauthorized access to DMDC data exposed personal information of up to four million military personnel.
•The breach occurred from October 2025 to July 2026, with unencrypted data accessed.
•Affected individuals are being offered one year of credit monitoring services.

A data breach at the Pentagon's Defense Manpower Data Center (DMDC) has compromised unencrypted personal information, including Social Security numbers, of potentially four million military personnel. Unauthorized access occurred from October 2025 until July 16, 2026, when the vulnerability was discovered. The breach was confirmed through a notification letter sent to affected individuals on September 18, 2026. The DMDC, which maintains over 60 million records, has not indicated any misuse of the data but warns that it could be exploited by foreign intelligence or cybercriminals. The Pentagon has since patched the vulnerability and is offering one year of credit monitoring to those affected. The breach raises significant national security concerns due to the sensitive nature of the exposed data.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2025-10-01

Breach begins

Unauthorized users accessed DMDC systems, exploiting a vulnerability.

2026-07-16

Vulnerability discovered

DMDC identified unauthorized access to sensitive files in its system.

2026-09-18

Notification sent to victims

DMDC sent letters to affected individuals informing them of the breach.

2026-09-25

Breach reported publicly

CNN reports on the breach, highlighting national security implications.

More articles in this cluster (2)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (4)

Defense Department
Defense Manpower Data Center
Department of Defense
Pentagon

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Data Breach related to Defense Department
Data Breach related to Defense Manpower Data Center
Data Breach related to Department of Defense
Data Breach related to Pentagon
Data Breach related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track Defense Department in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Vulnerability in F5 BIG-IP APM Exploited for Remote Code Execution F5 Networks has reported a critical vulnerability in its BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127, which is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute remote code on systems configured with both an APM access policy and an OAuth profile. This…

Massive Network of AI Proxy Servers Used for Malicious Activities Uncovered Security researchers from Team Cymru have identified over 10,000 proxy servers in China facilitating malicious AI activities. These servers, termed 'transfer stations,' are primarily used to bypass geographic restrictions and conduct model distillation attacks against frontier AI models. The infrastructure allows…