Defense Manpower Data Center: Pentagon Data Breach: Military Personnel's Social Security Numbers Were Exposed For Nine Months

Pentagon’s Defense Manpower Data Center Suffers Major Data Breach Affecting Millions of Military Personnel

A significant data breach at the Defense Manpower Data Center (DMDC), the Pentagon’s HR system housing over 60 million records, exposed unencrypted Social Security numbers and personal data of current and former U.S. military personnel for nine months before detection. The breach began in October 2025 but was only discovered on July 16, 2026, when the Pentagon identified and secured the compromised server.

Affected individuals are now receiving notification letters confirming that unauthorized users accessed their Social Security numbers, names, dates of birth, contact details, sex, race, and military occupational specialties. While the full scope remains unclear, sources indicate that up to four million Department of Defense (DoD) personnel may be impacted. The Pentagon has stated there is no current evidence of data misuse.

National security experts warn of severe risks, noting that adversaries particularly during past conflicts like the Iran tensions have exploited commercial datasets to track U.S. military movements. Combining the stolen DMDC data with publicly available information could allow bad actors to construct detailed targeting profiles, including financial records, spending habits, and physical locations of service members.

Source: https://artvoice.com/pentagon-data-breach-military-personnel-s-social-security-numbers-were-exposed-f

DMDC cybersecurity rating report: https://www.rankiteo.com/company/dmdc

"id": "DMD1790483299",
"linkid": "dmdc",
"type": "Breach",
"date": "10/2025",
"severity": "100",
"impact": "8",
"explanation": "Attack that could bring to a war"

{'affected_entities': [{'customers_affected': 'Up to 4 million Department of '
                                              'Defense (DoD) personnel',
                        'industry': 'Defense/Military',
                        'location': 'United States',
                        'name': 'Defense Manpower Data Center (DMDC)',
                        'size': '60 million records',
                        'type': 'Government Agency'}],
 'customer_advisories': 'Notification letters to affected military personnel',
 'data_breach': {'data_encryption': 'No (unencrypted Social Security numbers)',
                 'number_of_records_exposed': 'Up to 4 million',
                 'personally_identifiable_information': 'Social Security '
                                                        'numbers, names, dates '
                                                        'of birth, contact '
                                                        'details, sex, race',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personally Identifiable '
                                             'Information (PII), Military '
                                             'Personnel Data'},
 'date_detected': '2026-07-16',
 'description': 'A significant data breach at the Defense Manpower Data Center '
                '(DMDC), the Pentagon’s HR system housing over 60 million '
                'records, exposed unencrypted Social Security numbers and '
                'personal data of current and former U.S. military personnel '
                'for nine months before detection. The breach began in October '
                '2025 but was only discovered on July 16, 2026, when the '
                'Pentagon identified and secured the compromised server. '
                'Affected individuals are now receiving notification letters '
                'confirming unauthorized access to their Social Security '
                'numbers, names, dates of birth, contact details, sex, race, '
                'and military occupational specialties. While the full scope '
                'remains unclear, up to four million Department of Defense '
                '(DoD) personnel may be impacted. The Pentagon has stated '
                'there is no current evidence of data misuse. National '
                'security experts warn of severe risks, noting that '
                'adversaries could exploit the data to construct detailed '
                'targeting profiles of service members.',
 'impact': {'brand_reputation_impact': 'Severe national security and '
                                       'reputational risks',
            'data_compromised': 'Unencrypted Social Security numbers, names, '
                                'dates of birth, contact details, sex, race, '
                                'and military occupational specialties',
            'identity_theft_risk': 'High',
            'systems_affected': 'Defense Manpower Data Center (DMDC) server'},
 'investigation_status': 'Ongoing',
 'response': {'communication_strategy': 'Notification letters to affected '
                                        'individuals',
              'containment_measures': 'Compromised server secured'},
 'title': 'Pentagon’s Defense Manpower Data Center Suffers Major Data Breach '
          'Affecting Millions of Military Personnel',
 'type': 'Data Breach'}