“The breach exposed personally identifiable information, including Social Security numbers, alongside a person’s name, date of birth, sex, race, and other information about their military service.”
The intruders sat in the Pentagon’s personnel records from October 2025 to mid-July 2026. Nine months. The records were unencrypted and reachable through a hole in a file-sharing system. The DoD says it sees no sign of misuse and then stopped answering questions.