Pentagon breach exposes personal data of over 3 million military-linked individuals

A small group of unauthorized users infiltrated the Defense Manpower Data Center’s network from October 2025 to July 2026, extracting unencrypted personally identifiable information. The breach affected 2.76 million living individuals and 294,000 deceased persons connected to the military, exposing Social Security numbers, names, dates of birth, contact details, race, sex and specific military occupational data. The Department of Defense promptly remedied the vulnerability and reports no sign that the stolen data has been used maliciously.

Notification letters are being mailed by the contracted provider Identity Theft Guard Solutions (IDX), which also supplies up to a year of free credit monitoring and identity-restoration assistance. Officials warn recipients to beware of phishing scams that may exploit the breach notice. They advise steps such as credit freezes, fraud alerts, regular account monitoring, two-factor authentication and, for those with exposed SSNs, obtaining an IRS Identity Protection PIN.