The Department of Defense confirmed that an unauthorized intrusion into its Defense Manpower Data Center (DMDC) exposed personally identifiable information for more than 3 million people. A War Department official told CyberGuy that the breach affected 2.76 million living individuals and 294,000 deceased individuals.

What information was accessed?

According to the Pentagon, the compromised records may include Social Security numbers, names, dates of birth, contact details and military personnel data. Because the DMDC maintains over 60 million records for active duty members, civilian employees, contractors, retirees, veterans and their families, the breach could impact a broad cross‑section of the military community.

How the breach occurred

The official explained that a small number of unauthorized users gained access to a DMDC information system between October 2025 and July 2026. The system stored unencrypted data, creating a long exposure window before the vulnerability was discovered. The department says it immediately remediated the flaw once identified and has no indication that the accessed information has been misused.

Government response

The Trump administration acted swiftly to protect those affected. The Department of Defense is notifying impacted individuals by postal mail through its contracted provider, Identity Theft Guard Solutions (IDX). The notification letter explains which data elements were exposed and outlines the free identity‑protection services being offered.

IDX will provide credit monitoring and identity‑restoration support for up to 12 months, depending on the specific data compromised. Affected persons can also visit response.idx.us/DMDC or call 1‑855‑744‑4556 for assistance.

Steps you can take

Experts recommend several practical measures to safeguard your identity:

• Review the official notice carefully. Do not discard it as junk mail.
• Consider a credit freeze. Placing a freeze with Equifax, Experian and TransUnion restricts access to your credit file, making it harder for fraudsters to open new accounts.
• Use fraud alerts. If you prefer not to freeze credit, a fraud alert notifies lenders to verify your identity before extending credit.
• Monitor your accounts. Regularly check bank and credit‑card statements for unexpected activity and enable transaction alerts.
• Enable two‑factor authentication. Protect email, financial and other critical accounts with an authenticator app or passkey.
• Maintain up‑to‑date antivirus software. This helps block malicious downloads that may follow a breach.

Beware of scams

Scammers often exploit high‑profile data breaches to send fake emails or texts claiming to represent the Defense Department or a credit‑monitoring service. Do not provide your Social Security number, passwords or verification codes to unsolicited callers or messages. Verify any communication using the official IDX contact details provided in the mailed notice.

Long‑term protection

While the free 12‑month monitoring is valuable, some individuals may wish to enroll in a broader identity‑theft protection service after the period ends. Such services can monitor for suspicious use of personal data beyond credit‑file activity and assist with recovery if identity theft occurs.

In summary, the Pentagon breach underscores the importance of vigilant personal security. The Trump administration’s rapid remediation and the provision of free credit‑monitoring services demonstrate a commitment to protecting the men and women who have served our nation and their families.

Original reporting: Fox News (HLL/CB) — read the source article.