Hackers steal data on about 2.8 million living US military and DoD personnel

Hackers stole unencrypted personal records belonging to about 2.8 million living US military and Department of Defense personnel. Unauthorized users exploited a vulnerability in a Defense Manpower Data Center file-sharing system for months, according to TechCrunch. A Pentagon official cited by CNN and Federal News Network said the breach also affected close to 300,000 deceased individuals. Exposed data included Social Security numbers, names, dates of birth, sex, race and other military service details. A Defense Manpower Data Center breach notification shared on Reddit says several unauthorized users exploited the vulnerability between October 2025 and mid-July 2026. The vulnerability was discovered and patched on July 16, 2026. The Defense Manpower Data Center maintains more than 60 million records for military and civilian staff and their families to support benefits, entitlements and identity management. The center's website says the security of identity information is paramount. The Department of Defense said it has no indication the information was misused. Other recent thefts of federal employee data include a September FBI breach attributed to the ShinyHunters hacking group.