US Defense Department personnel server intrusion exposes data of about 3.05 million people
Unauthorized access to a server at the US Department of Defense's personnel data center exposed unencrypted data on 2.76 million living individuals and 294,000 deceased individuals. The exposed data included Social Security numbers, names, dates of birth, contact details and military job information. A later lawsuit filed by Marines alleged that the department had left security flaws unaddressed before the incident.
Key facts
- Affected organization
- U.S. Department of Defense
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal data of 2.76 million living and 294,000 deceased individuals
- Cause / method
- Unauthorized access to a server at the personnel data center
- Location
- United States
If your data was exposed
Exposed dataNamePhone numberDate of birthNational ID number
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- The leak of personal data on US Department of Defense personnel was reported.
- The exposure of unencrypted data on 2.76 million living and 294,000 deceased individuals was confirmed.
- In a lawsuit by Marines, it was alleged that the department had left security flaws unaddressed before the incident.
12 related reports
- Pentagon Data Breach and Kiteworks Targeted in Cyberattacks
- Troops Exposed in New Pentagon Data Breach: How Many Were Affected?
- Letter: Defense Department personnel data exposed in breach
- Breach at Pentagon personnel database exposed data of millions
- Pentagon Personnel Agency Data Breach Impacts 3 Million People
- Pentagon data breach exposes Social Security numbers, personal info of 2.76M US military, civilian personnel
- Social Security numbers exposed in Pentagon data leak affecting millions
- Ransomware attack on Winona County may have exposed Social Security numbers
- Morgan Services Data Breach Exposes Social Security Numbers
- Pentagon data breach exposes records of over 3M people
- Fairlife Data Breach Exposed Social Security Numbers
- Pentagon ignored cybersecurity flaws before data breach, Marines’ lawsuit says
Other incidents at U.S. Department of Defense
Pentagon General Fired Over Alleged Leak
An alleged leak of information was raised at the US Department of Defense. Hegseth dismissed a Department of Defense general in connection with the allegation.
Read on Українські Національні Новини (УНН) ↗Suspected cyberattack investigated after freezer failures at U.S. military bases
Impact: Freezer failures at U.S. military bases and loss of stored food
A series of freezer failures at stores on U.S. military bases caused food to spoil. The U.S. Department of Defense is investigating the possibility of a cyberattack and has also launched a joint investigation with French authorities. Some officials suspected Iran was behind the attacks.
Related reports: 25 · last report →Ehud Tenenbaum's teenage hack of the Pentagon
Ehud Tenenbaum hacked the US Department of Defense as a teenager. The exact date, intrusion method, scale of damage and response have not been confirmed.
Read on Korben ↗Calls for probe into Pentagon communications security after major cyberattack
Following a major cyberattack, US lawmakers called for an investigation into the Department of Defense's communications security failures. The date of the original attack, the method of intrusion and the specific extent of the damage have not been confirmed.
Read on Federal News Network ↗US Department of Defense notifies over 26,000 people of email data leak
26KImpact: More than 26,000 people potentially affected
An email data leak occurred at the US Department of Defense in 2023. In February 2024, the department notified more than 26,000 people who may have been affected.
Related reports: 2 · last report →Iran unveils production of Shahed-171, a copy of the US RQ-170
Iran unveiled the production process of the Shahed-171, a copy of the US RQ-170 Sentinel. The original aircraft was described as having been jammed and hacked, but the specific time and circumstances of the incident have not been confirmed.
Read on EurAsian Times ↗632,000 U.S. Defense and Justice Department email addresses compromised
Impact: 632,000 email addresses of U.S. Department of Defense and Department of Justice employees
A large-scale MOVEit cyberattack compromised 632,000 email addresses belonging to employees of the U.S. Department of Defense and Department of Justice. Russian hackers were named as the attackers.
Related reports: 2 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.