Defense Department Data Breach: Information of Millions of Personnel at Risk
A months-long data breach targeting the Department of Defense may have led to the leakage of personal information of millions of employees, including US military personnel.
As a result of a months-long data breach targeting the US Department of Defense's human resources unit, personal information of approximately four million personnel, including US service members, may have been leaked.
Scope and Process of the Data Breach
According to a September 18 letter, a security breach occurred in the Defense Manpower Data Center's information system between October 2025 and July 16, 2026.
It was stated that unauthorized users accessed unencrypted personal data in the period leading up to the date the leak was detected, and this situation affected a wide area.
Leaked Sensitive Information and Those Affected
It was announced that the accessed files included Social Security numbers, names, birthdays, demographic and contact information, and military personnel details.
While the Department of Defense did not immediately disclose the exact figure, a Military Times report estimates that approximately 4 million personnel were affected by this situation.
Measures Taken and Security Patches
Following the detection of the vulnerability, the file-sharing system was immediately updated and the security flaw was closed.
The ministry also announced that it swiftly activated privacy and cybersecurity incident response actions, taking necessary technical steps.
Credit Monitoring Services and Current Status
The letter stated that affected personnel will be provided with free credit monitoring services for one year through IDX, a company offering identity theft protection services.
As of the date the letter was published, the Department of Defense stated that it had found no evidence or trace indicating that the compromised information was misused.