Pentagon personnel database breached, exposing data of 60 million records

This digest was compiled by AI from multiple sources — links to the originals are below.
Unauthorized users accessed a vulnerable server at the U.S. Defense Manpower Data Center in October, gaining access to personal information of current and former military personnel. The Pentagon discovered and fixed the breach in July, nine months later. The database held more than 60 million records as of fiscal year 2024.
Key Facts
- Unauthorized users accessed a vulnerable DMDC server in October, and the Pentagon fixed the issue in July, nine months later.
- The DMDC database contained more than 60 million records as of fiscal year 2024, including service members, civilian personnel, contractors, retirees, veterans, and their families.
- The exposed data included Social Security numbers and at least one additional identifier such as name, date of birth, contact details, gender, race, or service information.
- CNN reported that the information could help foreign adversaries understand who does what for the U.S. armed forces worldwide.
Breach Discovery
The Defense Manpower Data Center (DMDC), which reports to the Office of the Secretary of Defense, collects personnel, technical, financial, and other data for the department. Unauthorized users gained access to a vulnerable DMDC computer server in October, according to a letter sent to affected individuals. The Pentagon discovered and remediated the issue in July, nine months after the initial access. The database stores information on service history and family members for medical care, retirement benefits, and other administrative tasks.
Data Exposure
Military Times reported that unauthorized users accessed Social Security numbers of letter recipients and at least one additional piece of identifying information. The additional identifiers could include name, date of birth, contact details, gender, race, or service information such as specialty. CNN noted that this information could help foreign adversaries gain a clearer picture of who does what for the U.S. armed forces in different parts of the world. The DMDC database contained over 60 million records as of fiscal year 2024, covering service members, civilian personnel, contractors, retirees, veterans, and their families.