Kathrine Frich
This leak follows a troubling pattern of attacks against the federal government.
Digital systems hold the most sensitive details of modern life, but even the most guarded networks can leave the door unlocked.
A security failure has just exposed millions of highly sensitive government files.
The quiet intrusion lasted for nearly a year before anyone noticed.
Millions of files exposed
A data breach at the United States Department of Defense has compromised the personal information of more than three million people. The affected records belong to individuals connected to the armed forces.
ABC News cited by Militarniy reported that the exposed data includes Social Security numbers and specific job details for military and civilian staff. The vulnerability affected 2.76 million living people. The breach also compromised the files of roughly 294,000 deceased individuals.
An investigation revealed that unknown users accessed the files through a vulnerability in a file-sharing system. The unauthorized access continued undetected starting in October 2025 and ending in July 2026.
Military personnel finally spotted the security gap on July 16, 2026, and moved to close it. By that time, unencrypted personal details had been visible for months.
A sprawling database
The compromised system is managed by the Defense Manpower Data Center. This single federal agency handles critical records for more than 60 million people. Their massive digital database tracks active-duty troops, reserves, civilian employees, military contractors, and their families.
The Pentagon stated they have not found evidence showing the stolen information was used for criminal activities. The department is now offering identity protection and credit monitoring services to everyone affected.
Officials have not publicly linked this cyberattack to any known foreign government or hacking collective. They only confirmed that a small group of unauthorized users viewed the files.
Growing cyber threats
This leak follows a troubling pattern of attacks against the federal government, including a 2024 incident where an espionage group known as Salt Typhoon infiltrated a National Guard network. That earlier attack lasted for months.
United States officials eventually linked that intrusion directly to Chinese intelligence operations. Those hackers successfully extracted sensitive maps and network traffic data.
The Department of Defense breach coincides with other recent digital threats. This month, the ShinyHunters hacking group claimed responsibility for a massive data theft targeting the FBI.
Federal law enforcement agencies are currently investigating the FBI incident. However, investigators see no connection between that case and the military database breach.
