--- title: "Pentagon breach exposes records of 2.76 million… | Firevault" url: https://fire-vault.com/news/pentagon-dmdc-personnel-data-breach-2026 description: "Intruders reached a Defense Manpower Data Center server for nine months, exposing unencrypted Social Security numbers and occupational details of current and…" lang: en-GB --- Breaking News Updated as information becomes available Image: AI-generated editorial illustration of a records room with server racks, filing cabinets and a laptop showing personnel forms (https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/pentagon-personnel-data-breach-2026.jpg) News · Breach Analysis · Breaking # Pentagon breach exposes records of 2.76 million military personnel Intruders reached a Defense Manpower Data Center server for nine months, exposing unencrypted Social Security numbers and occupational details of current and former US military personnel, CNN reports. Image: Mark Fermor, CTO, CMO and Founder of Firevault (https://fire-vault.com/assets/mark-fermor-DWFWqeWL.jpg) **Mark Fermor**CTO, CMO and Founder, Firevault Published 2 November 2026 · 4 min read Share LinkedIn (https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fpentagon-dmdc-personnel-data-breach-2026)Email ## What happened Nine months of unnoticed access exposed the personal records of millions of people connected to the US military. CNN reports that "unauthorised users" gained access to a vulnerable server belonging to the Defense Manpower Data Center (DMDC), the Pentagon's central personnel and benefits data system. According to a letter sent to victims and reviewed by CNN, the access began last October. The Pentagon did not discover and remediate the issue until July this year. A Defense Department official told CNN that the breach affects 2.76 million living individuals, a category that may include current and former personnel and their dependents, and 294,000 deceased individuals. ## What is known about the exposure The letter states that the breached data included Social Security numbers and other personal information. In some cases it also included the occupational specialty of service members. CNN reports that the data was not encrypted, according to the letter. The Pentagon says it currently has no indication that the data has been misused, and it is offering victims one year of credit monitoring. It is not known who was behind the breach. CNN reports that a Pentagon spokesperson did not immediately respond when asked. For context, the DMDC held at least 60 million records as of fiscal year 2024, according to its website. That is the size of the system, not the number of records breached. ## Why this matters The concern goes beyond identity fraud. Experts quoted by CNN warn that occupational details, combined with Social Security numbers and commercially available data, could help a foreign intelligence service work out who does what for the US military and where. Two failures stand out. The intrusion went undetected for nine months, and the data that was reached was unencrypted. Either control, working as intended, could have reduced the harm. The DMDC describes itself as the central access point for entitlements, benefits and medical readiness information. When a single system holds this much sensitive data, a single vulnerable server can expose a very large population. ## The practical response For organisations that hold large personnel or customer datasets: - Encrypt sensitive records at rest, so that a compromised server does not hand over readable data. - Monitor for unusual access to bulk records, and test how quickly it would be noticed. - Keep only the data each system genuinely needs, and remove older records it no longer requires. - Prepare guidance for the people affected about targeted phishing that uses their real details. These are Firevault recommendations, not claims about which specific controls the DMDC had in place. ## Where physical disconnection helps, and where it does not Offline Secure Storage (https://fire-vault.com/offline-secure-storage)® keeps selected retained copies physically disconnected by default, with hardware-enforced isolation while disconnected. Authorised access uses a separate, non-IP connection-control process, and the connection is physically broken again when the session ends. A personnel system that serves benefits and entitlements needs to stay online, so physical disconnection would not protect its working records. It can protect retained copies, such as historical archives and recovery sets, which do not need a live network path. A disconnected copy cannot be reached through a vulnerable online server. The useful question is which records must be reachable all the time, and which can be held offline until they are deliberately required. Explore OSS for Business: https://fire-vault.com/oss-for-business-data. ## Source CNN: Pentagon data breach of military personnel raises national security concerns (https://edition.cnn.com/2026/09/25/politics/pentagon-data-personnel-breach), by Sean Lyngaas and Davis Winkie, published 25 September 2026 and updated 28 September 2026, accessed 2 November 2026. Figures and statements above are attributed to that reporting; Firevault has not independently verified the incident. _Analysis by Mark Fermor. Featured image is an AI-generated editorial illustration, not a photograph of any Defense Department facility._ ## Questions A Defense Department official told CNN that the breach affects 2.76 million living individuals and 294,000 deceased individuals. According to the victim letter reported by CNN, the data included Social Security numbers and other personal information, and in some cases occupational specialty. The data was not encrypted. Not for the live system, which must stay online. Physical disconnection protects retained copies, such as archives and recovery sets, from being reached through a vulnerable online server. About the author **Mark Fermor** CTO, CMO and Founder of Firevault. Mark writes on physical control, offline storage and the incidents that show why both matter. ## More breach analysis - Breach Analysis · 2 Nov 2026**Amadeus breach exposes airline passenger records across Asia**_Read the analysis_: https://fire-vault.com/news/amadeus-airline-reservation-data-breach-2026 - Breach Analysis · 31 Oct 2026**Fake IT calls expose client data at four Canadian law firms**_Read the analysis_: https://fire-vault.com/news/canadian-law-firms-voice-phishing-client-data-2026 - Breach Analysis · 30 Oct 2026**Binance hit by $6.3bn breach in what could be the biggest crypto heist on record**_Read the analysis_: https://fire-vault.com/news/binance-hack-biggest-crypto-heist-2026 - Breach Analysis · 21 Oct 2026**State Bank of India confirms data loss after 3,897 customer records found on the dark web**_Read the analysis_: https://fire-vault.com/news/sbi-confirms-data-breach-customer-records-dark-web-2026 - Breach Analysis · 21 Oct 2026**Cyberattack on cloud provider Arcadia may expose data of 125,000 Japanese police officers and staff**_Read the analysis_: https://fire-vault.com/news/arcadia-cyberattack-japan-police-data-breach-2026 - Breach Analysis · 15 Oct 2026**EY data breach: client tax records exposed through a support platform**_Read the analysis_: https://fire-vault.com/news/ey-data-breach-client-tax-records-october-2026 Back to the Knowledge Vault: https://fire-vault.com/learn/knowledge Image: Offline Secure Storage icon (https://fire-vault.com/__l5e/assets-v1/a78723d3-5b1a-48bf-9040-c767b759823d/oss-icon-correct.png) Why #OSS ### Keep a clean copy out of reach. Offline Secure Storage® keeps one copy physically disconnected at the hardware level between sessions. Why #OSS: https://fire-vault.com/why-oss Image: Control by Firevault icon (https://fire-vault.com/__l5e/assets-v1/9c97df8c-bca8-45bc-86f3-ec698db3afe8/control-icon.png) Control ### Govern the paths attackers depend on. Physical, out-of-band control of selected network paths, composed into ten Blueprints. Explore Control: https://fire-vault.com/control Image: Vault (https://fire-vault.com/__l5e/assets-v1/b9413e6e-5b45-442d-ab80-67cf0c578ba6/oss-approved-vault.png) Ready to start? ### Create your Vault online. Business Vaults from £360 a month inc VAT, on a 36-month commitment. Get started: https://fire-vault.com/get-started Book a demo: https://fire-vault.com/demo Get started ## Structured data ```json [ { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/news/pentagon-dmdc-personnel-data-breach-2026#webpage", "url": "https://fire-vault.com/news/pentagon-dmdc-personnel-data-breach-2026", "name": "Pentagon breach exposes records of 2.76 million…", "description": "Intruders reached a Defense Manpower Data Center server for nine months, exposing unencrypted Social Security numbers and occupational details of current and…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/pentagon-personnel-data-breach-2026.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/news/pentagon-dmdc-personnel-data-breach-2026#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/news/pentagon-dmdc-personnel-data-breach-2026#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "Pentagon breach exposes records of 2.76 million military personnel", "item": "https://fire-vault.com/news/pentagon-dmdc-personnel-data-breach-2026" } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "Pentagon breach exposes records of 2.76 million military personnel", "description": "Intruders reached a Defense Manpower Data Center server for nine months, exposing unencrypted Social Security numbers and occupational details of current and former US military personnel, CNN reports.", "url": "https://fire-vault.com/news/pentagon-dmdc-personnel-data-breach-2026", "image": [ { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/pentagon-personnel-data-breach-2026.jpg", "width": 1200, "height": 1200 }, { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/pentagon-personnel-data-breach-2026.jpg", "width": 1200, "height": 900 }, { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/pentagon-personnel-data-breach-2026.jpg", "width": 1200, "height": 675 } ], "thumbnailUrl": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/pentagon-personnel-data-breach-2026.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "jobTitle": "CTO, CMO & Founder", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@type": "NewsMediaOrganization", "name": "Firevault", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 600, "height": 60 } }, "datePublished": "2026-11-02T07:47:08.552471+00:00", "dateModified": "2026-11-02T07:47:08.552471+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/news/pentagon-dmdc-personnel-data-breach-2026" }, "inLanguage": "en-GB", "articleSection": "Breach Analysis", "wordCount": 622, "keywords": "Pentagon, Breach Analysis, data breach, cyber security, offline secure storage, data protection, physical air gap", "articleBody": "## What happened Nine months of unnoticed access exposed the personal records of millions of people connected to the US military. CNN reports that \"unauthorised users\" gained access to a vulnerable server belonging to the Defense Manpower Data Center (DMDC), the Pentagon's central personnel and benefits data system. According to a letter sent to victims and reviewed by CNN, the access began last O", "dateline": "United Kingdom", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".article-summary", "h2" ] }, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2026 }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "How many people were affected by the Pentagon DMDC breach?", "acceptedAnswer": { "@type": "Answer", "text": "A Defense Department official told CNN that the breach affects 2.76 million living individuals and 294,000 deceased individuals." } }, { "@type": "Question", "name": "What data was exposed?", "acceptedAnswer": { "@type": "Answer", "text": "According to the victim letter reported by CNN, the data included Social Security numbers and other personal information, and in some cases occupational specialty. The data was not encrypted." } }, { "@type": "Question", "name": "Would offline storage have stopped this breach?", "acceptedAnswer": { "@type": "Answer", "text": "Not for the live system, which must stay online. Physical disconnection protects retained copies, such as archives and recovery sets, from being reached through a vulnerable online server." } } ] }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] }, { "@type": "ContactPoint", "contactType": "sales", "email": "sales@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "founder": [ { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Founder, CTO and CMO" }, { "@type": "Person", "name": "David Bailey", "jobTitle": "Founder and CEO" } ], "areaServed": [ "United Kingdom", "Europe", "United States", "Middle East" ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "brand": [ { "@type": "Brand", "name": "Offline Secure Storage" }, { "@type": "Brand", "name": "Control by Firevault" }, { "@type": "Brand", "name": "Firebreak" } ], "knowsAbout": [ "Offline Secure Storage", "Physically disconnected data storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Ransomware recovery", "3-2-1-1-0 backup rule", "AI kill switch", "Operational technology security", "Critical national infrastructure resilience", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance", "DORA Compliance", "NCSC Cyber Assessment Framework" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } } ] ```