Pentagon personnel breach affected about 3.05 million people

The Defense Manpower Data Center says unauthorized users accessed files on one of its file-sharing servers from October 2025 until the vulnerability allowing access was discovered on July 16, 2026. A Department of War official told CNN the breach affected 2.76 million living people and 294,000 deceased people, a total of about 3.05 million. A notification letter dated September 18 says the files contained unencrypted personal information. The data varied by person and could include Social Security numbers, names, birth dates, contact details, demographic information and military occupational specialties. The letter does not identify the file-sharing product or explain the vulnerability. The center said it patched the vulnerability and restored the system after discovering the problem. It also said it had no indications that the accessed information had been misused. The identity of those who accessed the files and the specific records involved remain unknown. The reported affected population comes from a Department of War official speaking to CNN; the notification letter itself does not state a count.