Pentagon Data Breach Exposes Sensitive Records of Nearly 3 Million People as FBI Faces Its Own Cyber Crisis

A Pentagon data breach has left the personal details of millions of Americans exposed, raising serious questions about the security of some of the government’s most sensitive databases. According to a US defense official, unauthorised users gained access to a vast personnel system and viewed information including Social Security numbers and descriptions of the jobs people held.

The incident comes at a time when federal agencies are already on edge, with the FBI dealing with a separate breach of its recruitment website.

The Scale of the Breach

The numbers involved are staggering. The defense official said the breach affected:

• 2.76 million people who are currently living
• 294,000 people who have died

The exposed files contained highly personal data, including Social Security numbers and details about the roles performed by both military and civilian personnel. That second category is particularly worrying, as information about someone’s job within the defense system could be valuable to hostile intelligence services.

What Happened

According to the official, a small number of unauthorised users gained access to personally identifiable information stored in a system run by the Defense Manpower Data Center.

A Breach That Went Unnoticed for Months

The intrusion was not a quick hit-and-run. The unauthorised access began in October 2025 and continued until July 2026, meaning attackers may have had entry to the system for around nine months before it was detected.

Once the vulnerability was discovered, officials said, the agency moved quickly to fix it and secure the affected system.

The breach was first brought to public attention last week by Military Times.

What Is the Defense Manpower Data Center?

The Defense Manpower Data Center, known as DMDC, is one of the Pentagon’s central stores of personnel information. It holds records on a wide range of people connected to the US military, including:

• Active-duty service members
• Reserve troops
• Civilian employees
• Defense contractors
• Military retirees and veterans
• Family members of service personnel

In total, the agency manages more than 60 million personnel records. That makes it an extremely attractive target for cybercriminals and foreign intelligence agencies alike.

No Evidence of Misuse So Far

Defense officials have stressed that, at this stage, there is no sign that any of the stolen data has been used for fraud or other harmful purposes.

Even so, the Pentagon is taking precautions. Those affected are being offered identity protection services and credit monitoring to help them spot any suspicious activity linked to their personal information.

Why This Is a National Security Concern

While many data breaches involve financial or consumer information, this one carries added risks. Knowing who works in which role within the defense system could help adversaries:

• Identify individuals with access to sensitive information
• Target personnel for recruitment or blackmail
• Launch tailored phishing or social engineering attacks
• Map out the structure of military and civilian teams

Security experts have long warned that personnel data can be just as valuable to foreign governments as classified documents, because it reveals who holds important positions.

FBI Battles a Separate Breach

The Pentagon’s disclosure comes just as the FBI is managing a cyber incident of its own.

The FBI Jobs Portal Hack

On Friday, the FBI sent a notice to staff explaining how it is responding to a breach of FBIJobs.gov, the bureau’s recruitment website.

A threat actor reportedly claimed it would release a large amount of personal data belonging to FBI employees. According to sources, the information at risk included:

• Names and home addresses
• Personal and work contact details
• Social Security numbers
• Dates of birth
• Emergency contact information

The bureau is reportedly acting on the assumption that the personal information of every FBI employee may have been compromised.

Hackers Change Their Story

In a surprising twist, the hacking group known as ShinyHunters later said it would not publish the data after all.

In a statement to media outlets on Monday, the group insisted that the incident had never been about extortion, ransom or financial gain. Instead, it described the episode as a kind of publicity campaign meant to defend its business and push back against what it called disinformation. The group claimed that making the statement in an ordinary way would never have drawn so much attention.

These claims have not been independently verified.

How the FBI Is Responding

The FBI has started notifying employees who were affected by the breach. It also confirmed that FBIJobs.gov is an unclassified system.

The bureau has issued guidance to staff who may be at risk, advising them to:

• Stay alert to their surroundings
• Avoid answering suspicious phone calls
• Attend internal briefings on the breach
• Refrain from speaking to the media
• Call 911 if members of the media trespass on their property

The Bigger Picture

Taken together, the two incidents highlight how vulnerable government personnel systems can be, even within agencies responsible for national security.

The Pentagon breach is especially concerning because of how long the attackers appear to have gone undetected. Nine months is a long time for unauthorised users to have access to such a sensitive database, and it raises questions about how the intrusion was missed for so long.

What Happens Next

For now, the priority for both the Pentagon and the FBI is protecting those whose information may have been exposed. Affected individuals are being urged to take advantage of credit monitoring and identity protection services and to watch closely for signs of fraud.

At the same time, pressure is likely to grow on federal agencies to strengthen their cybersecurity defences. With millions of records now potentially in the wrong hands, the Pentagon data breach serves as a stark reminder that protecting personal information is a vital part of protecting national security.