A Pentagon personnel database breach has exposed sensitive personal information belonging to 2.76 million living U.S. military and civilian personnel, along with records of 294,000 deceased individuals, a Pentagon official confirmed to Fox News. Unauthorized users reportedly accessed unencrypted files containing Social Security numbers and military or civilian employment information between October 2025 and July 2026. In total, the breach affected more than 3 million living and deceased people. As your consumer watchdog, I track breaches like this closely because exposed Social Security numbers can follow victims for years if they are not alert to the warning signs.
The Defense Manpower Data Center, known as DMDC, discovered the vulnerability in a file-sharing system on July 16 and began notifying affected individuals on Sept. 18. A Pentagon official said a small number of unauthorized users accessed personally identifiable information through the DMDC system over the roughly nine-month window. Once the vulnerability was found, the DMDC said it immediately remediated it. The Pentagon has stated it has no indication that the exposed information has been misused. The Pentagon did not identify who accessed the system or explain how they gained entry.
How to spot it
- You may receive a postal mail notification from Identity Theft Guard Solutions, also known as IDX, the company contracted by the Department of Defense to handle notifications.
- The notification would relate to personal data held in the DMDC system, which manages personnel and workforce information for the Defense Department and supports military personnel, their families and other department operations.
- Affected records include Social Security numbers and military or civilian employment information.
What to do if it happened to you
- Watch for a letter from IDX arriving by postal mail, since that is how the Pentagon says affected individuals are being notified.
- IDX will offer credit monitoring and identity restoration support based on the type of personal information exposed in each individual case, according to the Pentagon.
- If you have questions, contact IDX through its website or by calling 1-855-744-4556, as directed by the Pentagon.
I always remind readers that a breach notice is not something to shrug off. Even when officials say there is no evidence of misuse, as the Pentagon has said here, signing up for the offered credit monitoring and keeping an eye on your accounts is the safest move while the investigation continues.
Source: foxnews.com
