Millions affected by Pentagon database breach

A monthslong breach in the Defense Department's human resources database exposed personal information of millions of military personnel and their relatives, including Social Security numbers and job details.

Scale of the Pentagon breach

A Pentagon official confirmed to TIME Tuesday that two point seven six million living individuals and two hundred ninety four thousand deceased individuals have been affected by the breach at the Defense Manpower Data Center.

How the breach was discovered

Military Times first reported the breach on Thursday. The Defense Manpower Data Center discovered on July sixteen a security vulnerability in its file-sharing system, with unauthorized access occurring between October two thousand twenty five and discovery.

What data was exposed

The Defense Manpower Data Center collates personnel, manpower, training, financial, and other data for the Defense Department. Exposed information includes names, dates of birth, contact information, and other personal details from more than sixty million records.

Part of a broader pattern

The Pentagon breach follows an FBI investigation into criminal hacking group ShinyHunters's attack on the FBI jobs website, where hackers claimed to have stolen very sensitive data on nearly all agents and job applicants.

Security experts warn of wider risks

Justin Sherman of the Center for Strategic and International Studies wrote that breaches do not exist in a vacuum. Access to troves of records poses a massive security risk, especially if they fall into the hands of foreign actors.

“Breaches do not exist in a vacuum.”

What affected personnel can do

The Defense Manpower Data Center is offering year long credit monitoring and identity restoration services through IDX. The Federal Trade Commission says anyone can place a free credit freeze with Equifax, Experian, and TransUnion.