Cybersecurity
Pentagon breach exposes 2.8 million military personnel records; second major government hack in months
A yearlong compromise of Pentagon systems has compromised Social Security numbers and occupational data for millions of current and former service members, marking the second sensitive federal data breach in recent months.
Ars Technica
The Department of Defense is notifying more than 2.8 million current and former military personnel that their personal information was stolen through a sustained breach of its networks. The compromise began last October and was discovered months later, making it the second major incident in recent months to expose sensitive U.S. government employee data.
What was exposed#
The stolen records contained critical personal identifiers including Social Security numbers, full names, addresses, biological sex, and race. Particularly concerning to defense officials is the inclusion of each service member's occupational specialty—a detail that foreign intelligence agencies could weaponize to identify and target high-value military personnel for recruitment or espionage purposes. The compromise affected the Defense Manpower Data Center, a centralized system that consolidates personnel information across the Department of Defense.
Pattern of breaches#
This incident follows a breach at the FBI revealed last month, where the ransomware group ShinyHunters claimed to have accessed thousands of current and former agency employee records. According to reporting from Reuters, the stolen files included job titles of personnel assigned to counter-China and counter-Russia intelligence operations—information that could compromise active investigations and endanger analysts in the field.
The risk ahead#
ShinyHunters has stated it will not publicly release the FBI data, but the reliability of assurances from criminal groups with a history of extortion and data sales remains highly questionable. Security experts note that the stolen databases could easily fall into the hands of nation-state actors whose resources and motivation far exceed those of typical criminal organizations. The FBI has taken the unusual step of publicly urging group members to surrender themselves, signaling the severity of the breach and the intensity of the government's response.
