Hackers stole millions of US military personnel records during months-long data breach

The Department of Defense notified millions of current and former U.S. military personnel regarding a months-long data breach. Attackers exploited a file-sharing vulnerability between October 2025 and July 2026 to access unencrypted records from the Defense Manpower Data Center. The breach exposed personal information of roughly 2.8 million living personnel and staff, plus 300,000 deceased individuals. Stolen data included Social Security numbers, dates of birth, demographic information, and specific military service details from the DMDC.