Unauthorized Access to Personal Data Managed by the Pentagon

The unauthorized access began in October 2025 and continued until July 16, 2026, when the Defense Manpower Data Center detected a vulnerability in a file-sharing system. The organization, which manages information concerning personnel associated with the United States Department of Defense, confirmed that a small number of unauthorized users had accessed files stored in the system.

The incident affected records relating to 2.76 million living individuals and 294,000 deceased individuals. The information varied by person and could include Social Security numbers, names, dates of birth, contact details, sex, race and military occupational specialties. After detecting the vulnerability, the organization updated the system, restored its operation, initiated its response procedures and offered one year of credit monitoring and identity restoration services.

The latest confirmed status indicates that the vulnerability has been remediated and that no evidence of misuse of the accessed information had been identified. The identity of those responsible, the affected product and the technical characteristics of the vulnerability have not been publicly disclosed. The available official information comes from notification letters and statements made by defense officials.