US FBI and Pentagon suffer massive data breaches exposing personal health and security records
The FBI and the Pentagon's personnel databases were hacked, leaking medical, psychiatric and personal data of millions of individuals.
A hacking collective known as ShinyHunters obtained between two and three terabytes of FBI data, revealing applicants' medical histories, psychiatric evaluations and test results such as electrocardiograms and allergy information. At the same time, the Pentagon's Defense Manpower Data Center suffered a breach discovered in July that compromised Social Security numbers, occupational specialties and other personal details of up to four million current and former military personnel; the system stored at least 60 million records in fiscal year 2024 and was not encrypted.
Both agencies have launched investigations; the FBI declined comment, while the Pentagon reported no evidence of data misuse and pledged to strengthen cybersecurity. Cybersecurity consultant Eric O’Neill warned that adversarial nations, particularly Russia, are likely to seek the leaked information. These incidents expose vulnerabilities in U.S. government personnel systems and raise concerns about potential exploitation by foreign actors.
Why it matters
Leaked health and security data from federal agencies could be exploited by hostile actors, threatening personal privacy and national security.
How this story developed
- Sep 22 Hackers calling themselves ShinyHunters claim breach of FBI employee database
- Sep 26 The FBI announced an aggressive investigation into the alleged breach.
In this story
Related stories
4 in this thread