A major data breach at the Pentagon's HR system, the Defense Manpower Data Center (DMDC), exposed Social Security numbers and other sensitive personal information of current and former military personnel. Discovered nine months after initial access, the unencrypted data raises serious national security and counterintelligence concerns, potentially affecting up to four million individuals.
A significant data breach at the Pentagon's Defense Manpower Data Center (DMDC), which manages HR information for military personnel, has exposed Social Security numbers, personal details, and in some cases, occupational specialties of current and former service members. "Unauthorized users" accessed a vulnerable server starting last October, but the breach wasn't discovered and remediated until July—a nine-month delay. While the exact number of affected individuals is unclear, the DMDC maintains at least 60 million records, and reports suggest up to four million Department of Defense personnel could be impacted. National security experts are highly concerned, viewing the unencrypted data as a "goldmine" for foreign intelligence services seeking to track US military personnel or for cybercriminals. The exposure of "occupational specialty" combined with other identifiers could give adversaries a clear understanding of military roles globally. Experts warn that this data could be paired with commercial datasets to create detailed profiles on defense personnel, enabling sophisticated phishing attacks, profiling, and foreign intelligence approaches. The Pentagon states it has "no indications of misuse" yet and is offering one year of credit monitoring to victims while assessing and enhancing the DMDC system's cybersecurity posture.
