The incident raises concerns about the long-term security of personal information maintained by federal agencies. Unauthorized access continued for several months before the vulnerability was discovered, while affected individuals are now receiving notifications and access to identity protection services.
Unauthorized Access Exposed Millions of Military Personnel Records
According to Fox News, a Department of War official confirmed that the breach affected 2.76 million living individuals and 294,000 deceased individuals. The unauthorized access involved a DMDC information system between October 2025 and July 2026, when a small number of unauthorized users accessed files containing unencrypted personally identifiable information.
The department said the vulnerability was immediately addressed after its discovery. Officials also reported that they had found no indication that the accessed information had been misused.
The exposed data varied among affected individuals. Records potentially included names, Social Security numbers, birth dates, contact details, sex, race and military occupational specialties. Some files therefore contained information extending beyond standard personal identification records.
The DMDC maintains more than 60 million records covering active military personnel, civilian employees, contractors, veterans, retirees and military family members. Its databases support identity verification, benefits administration and other Defense Department programs. That extensive coverage means individuals who left military service years ago may still have personal information stored within the affected systems.
The breach also involved a prolonged period of unauthorized access. From October 2025 through July 2026, the affected information system remained accessible to unauthorized users before the security weakness was identified and corrected.
Pentagon Offers Identity Protection As Affected Individuals Face Potential Fraud Risks
According to the Department of War official cited by Fox News, affected individuals are being notified through postal letters distributed by Identity Theft Guard Solutions, also known as IDX, the department’s contracted provider.
The company is offering notification services, credit monitoring and identity restoration assistance based on the specific information exposed. Eligible individuals may receive 12 months of free credit monitoring and identity restoration support.
Recipients can obtain additional information through the designated response website, response.idx.us/DMDC,or by calling 1-855-744-4556.
The exposure of Social Security numbers presents particular concerns because these identifiers generally remain unchanged throughout a person’s lifetime. Combined with birth dates and contact information, they can potentially facilitate identity theft, fraudulent credit applications and targeted phishing attempts.
Credit monitoring can identify certain suspicious changes to a person’s credit file, although it does not necessarily prevent fraudulent activity from occurring. The Fox News report also recommends placing free credit freezes with Equifax, Experian and TransUnion to restrict unauthorized access to credit files. Fraud alerts provide another option by requiring lenders to take additional identity verification steps.
Other protective measures include reviewing financial accounts, enabling two-factor authentication and obtaining an IRS Identity Protection PIN to help prevent fraudulent federal tax filings.
Officials have reported no evidence of misuse, but the exposed information may remain sensitive beyond the initial monitoring period. Individuals receiving official notifications are therefore being encouraged to review the available protections and continue monitoring their accounts.
