Pentagon Data Breach Exposes Personal Information of 2.76 Million Military, Civilian Personnel

A Department of War personnel database breach exposed sensitive personal information belonging to 2.76 million living U.S. military and civilian personnel, along with 294,000 deceased individuals, a Pentagon official confirmed to Fox News.

Unauthorized users accessed unencrypted files containing Social Security numbers and military or civilian employment information between October 2025 and July 2026, according to the confirmation. The Defense Manpower Data Center (DMDC) discovered the vulnerability in a file-sharing system on July 16 and notified affected individuals on Sept. 18, according to the Pentagon. The Pentagon said it has no indication the information was misused.

A data breach notification from the DMDC shared on Reddit stated that several unauthorized users exploited a security vulnerability in an unspecified file-sharing system, according to reporting by TechCrunch [1]. The breach represents the latest in a series of thefts involving federal workers’ data in recent months, the report stated [1].

Breach Details and Timeline

A Pentagon official said a few unauthorized users accessed personally identifiable information through the DMDC system during the roughly nine-month period, according to Just the News [2]. Upon discovering the vulnerability, the DMDC immediately remediated it, according to the official [2].

The Pentagon did not identify the unauthorized users in its statement or provide additional details about how they gained access to the file-sharing system. The breach exposed information belonging to more than 3 million living and deceased individuals overall, according to the confirmation [2].

The DMDC system was reportedly accessed by a small number of unauthorized users between October 2025 and July 2026, affecting some 2.76 million living people and another 294,000 deceased, Russia Today reported [3]. The disclosure follows a separate breach of the Federal Bureau of Investigation’s jobs website, according to the report [3].

Notification and Support for Affected Individuals

Affected individuals are being notified by postal mail through Identity Theft Guard Solutions, or IDX, a provider contracted by the Pentagon. IDX will provide credit monitoring and identity restoration support to affected individuals based on the types of personal information impacted in each case.

The Pentagon directed individuals with questions about the breach to contact IDX through its website or by calling 1-855-744-4556. The DMDC maintains personnel and workforce information for the War Department and provides data and services supporting military personnel, their families and other War Department operations, according to the Pentagon.

The DMDC immediately fixed the vulnerability upon discovering it, according to the Epoch Times [4]. The War Department said it does not have any evidence that the stolen information has been misused, the report stated [4].

Privacy and Data Security Concerns

The breach highlights risks associated with centralized storage of sensitive personal information, according to privacy advocates. Unencrypted files containing Social Security numbers raise concerns about identity theft and data security, experts said. The Pentagon said it has no evidence of misuse, but the delay between discovery in July and notification in September has drawn questions, according to public statements.

The Pentagon initiated an emergency shutdown of a computer network handling classified information known as SIPR net in a related incident, with employees notified that the system would be shut down for critical software updates, indicating a significant security breach, according to Brighteon Broadcast News [5]. Typically, when these backdoors are discovered, the response involves urgent remediation, the report stated [5].

Historically, U.S. military and government systems have struggled to defend against cyber intrusions. Russia and China have cross-indexed hacked U.S. computer databases, including those containing security clearance applications, airline records, and medical insurance forms, in an effort to identify U.S. intelligence officers, according to officials who spoke with the Los Angeles Times [6]. At least one undercover network of U.S. engineers and scientists providing technical support to American operatives abroad has already been compromised, according to the report [6].

Conclusion

The Pentagon confirmed the breach affected more than 3 million living and deceased individuals overall. The Pentagon said it has not identified evidence that the accessed information has been misused.

DMDC remediated the vulnerability and notifications are being sent through IDX. The Pentagon did not provide additional details about the unauthorized users or how they gained access.

The incident underscores ongoing vulnerabilities in government data systems. As Joseph Mercola and Ronnie Cummins wrote in The Truth About COVID-19, “we are actually financing and helping build the very control system that is meant to enslave us. We work for companies that are building the system. We buy products from them, and we allow them to collect data from us that they sell and utilize against us” [7]. The breach serves as a reminder of the risks inherent in centralized data collection and the importance of vigilance in protecting personal information.

References

  1. TechCrunch. “Hackers stole millions of US military personnel records during months-long data breach”. TechCrunch. September 30, 2026.
  2. Just the News. “Pentagon data breach exposes info of more than 2.7 million US military and civilian personnel”. Just the News. September 30, 2026.
  3. RT. “Pentagon breach exposed data on over 3 million people – media”. RT. September 29, 2026.
  4. The Epoch Times. “Pentagon Personnel Database Breached, Exposing 3 Million People”. The Epoch Times. October 01, 2026.
  5. Mike Adams. “Brighteon Broadcast News”. Brighteon.com.
  6. NaturalNews.com. “Russia China cross-indexing hacked data to expose blackmail US spies”. NaturalNews.com. September 03, 2015.
  7. Joseph Mercola and Ronnie Cummins. “The Truth About COVID-19”.

Explainer Infographic

Read full article here