Pentagon Personnel Database Breach Exposes Sensitive Information of Millions of Service Members
A major personnel data system operated by the U.S. Department of Defense has been compromised in a cyberattack that exposed Social Security numbers and other personal information belonging to current and former service members, raising counterintelligence concerns amid the ongoing U.S. military confrontation with Iran.
According to a notification sent by the Defense Manpower Data Center (DMDC) to affected individuals, unauthorized users gained access to a vulnerable computer server operated by the center as early as October. The breach was not detected and addressed by the Pentagon until July, roughly nine months later.
The Defense Department has not yet determined the exact number of affected records. However, U.S. media reports have indicated that as many as 4 million Defense Department personnel could potentially be affected.
The Pentagon said there are currently no indications that the compromised information has been misused. However, the notification noted that, in some cases, the exposed data included service members’ occupational specialties, in addition to other personal details. The department also said the affected information was not encrypted.
Cybersecurity experts have warned that combining the exposed information with commercial databases could allow malicious actors to build detailed profiles of U.S. military personnel, including information about their jobs, finances, personal lives and online activities. Such data could potentially facilitate phishing campaigns, targeted profiling and attempts by foreign intelligence services to contact or target individuals.
Justin Sherman, CEO of Global Cyber Strategies, said the sheer volume of potentially exposed personnel data represents a significant security concern, particularly amid ongoing military tensions and competition between Washington and other governments.
The Defense Manpower Data Center serves as a central source for information related to benefits, entitlements and medical readiness involving Defense Department personnel, veterans and their families. Its services also support several critical U.S. government sectors, including defense, healthcare, labor, human services, financial services and veterans affairs.
