Skip to content

Sam's News — security — 2026-09-30

Security

8 Pentagon Personnel Agency Suffers Data Breach Affecting 3 Million People

The U.S. Defense Manpower Data Center (DMDC) disclosed a nine-month unauthorized access to a file-sharing server discovered in July 2026, exposing personal information of 2.76 million living individuals and 294,000 deceased persons. The breach resulted from an unpatched vulnerability that allowed attackers to access sensitive military and civilian personnel records from October 2025 through mid-July 2026.

  • Unauthorized access to DMDC file-sharing server lasted approximately 9 months (October 2025–July 2026)
  • Exposed data includes Social Security numbers, names, dates of birth, contact details, and military occupational specialties for 2.76 million living individuals and 294,000 deceased individuals
  • Vulnerability was discovered on July 16, 2026, and patched immediately; system was restored
  • No evidence of misuse of accessed information at time of disclosure
  • No known cybercrime group has claimed responsibility for the attack

Sources: SecurityWeek AI Web Searched, DigitalShield AI Web Searched