VTechFusion Team
VTechFusion Technologies
The US government has notified millions of current and former service members and staff that their personal information was stolen during a months-long breach of the Pentagon's personnel records.
Months of Undetected Access
Unauthorized users exploited a security vulnerability in an unspecified file-sharing system over several months, between October 2025 and mid-July 2026.
Who Was Affected
The breach affects about 2.8 million living people and close to 300,000 who are deceased. Exposed data includes Social Security numbers, names, dates of birth, sex, race and details of military service.
The Records Weren't Encrypted
The Defense Manpower Data Center maintains more than 60 million records on US military and civilian staff and their families. The stolen personnel records were not encrypted. The Department of Defense said it has no indication the information has been misused.
Lessons for Any Organization
Two failures compounded each other: an exposed file-sharing system and unencrypted data behind it. Patch internet-facing file transfer tools promptly, encrypt sensitive records at rest, and monitor for unusual bulk downloads so an intrusion is caught in days, not months.
Frequently Asked Questions
How many people were affected by the Pentagon breach?
About 2.8 million living people and close to 300,000 deceased people.
How did attackers get in?
By exploiting a vulnerability in an unspecified file-sharing system between October 2025 and mid-July 2026.
Was the data encrypted?
No. The personnel records were not encrypted.
Media & Press Enquiries
For editorial enquiries, expert commentary, or case study access.
Ready to Build Something Great?
Let's turn your idea into a product. Book a free 30-minute discovery call with our team — no commitment, just clarity.