Posted on 10/22/2026 6:02:35 AM PDT by Red Badger
Two Marines, one still serving, are taking the Pentagon to federal court after a massive breach exposed the private records of more than three million service members, veterans, and their families. Social Security numbers. Military job details. Birth dates. All of it sitting unencrypted on a vulnerable server for months.
The Pentagon fixed the vulnerability nine months after officials found it, and after unauthorized users first got in. The men and women who served this country had every reason to trust their government with that data. That trust deserved better than sensitive files left exposed for most of a year.
The lawsuit, filed Monday in Washington, D.C., federal court, seeks more than $5 million in damages. A current and a former Marine want to represent the affected service members, alleging “flagrant disregard for the privacy interests of service members and other military-adjacent individuals.” The Pentagon did not immediately respond to a request for comment on the case.
According to the notification sent to affected individuals, unauthorized access occurred between October 2025 and July 16, 2026. Officials discovered the vulnerability that July day and patched it. As noted, the files contained unencrypted information, including Social Security numbers and, depending on the person, birth dates, contact details, and military occupational specialties.
The department’s notification described the steps it took once the problem surfaced:
“Upon discovery of the security vulnerability, DMDC immediately initiated privacy and cybersecurity incident response actions in accordance with Office of Management and Budget and Department guidelines and policies. We are taking appropriate actions to assess and enhance the cybersecurity posture of the DMDC system.”
Recommended Ilhan Omar's New Interview: Describes Raid, Gives Bizarre Answer When Asked If She Married Brother Nick Arama Judge Issues Harsh Rebuke in Major Setback to Lindsay Clancy's Defense Team Bob Hoge For those receiving the notice, the offer included a year of credit monitoring and identity-restoration services. The Pentagon also reported no indications that anyone had misused the data. That leaves a serious breach to account for, with the actual damage still uncertain.
Who got in? Publicly, that remains unanswered. There is no established finding that a foreign government acquired the records. But knowing a servicemember’s job, along with personal details that identify that person, could give an intelligence service something useful to work with.
Justin Sherman of Global Cyber Strategies spelled out that risk:
“On its own, having personal data on potentially millions of service members exposed is dangerous as the US wages war on Iran and is in competition with multiple other governments. If a foreign adversary was to get this kind of data trove, it could enable phishing, profiling, foreign intel approaches, and much more.”
The affected population extends beyond troops currently serving. Officials counted 2.76 million living individuals and 294,000 deceased individuals. The Defense Manpower Data Center maintains records for veterans, civilians, contractors, and family members as well as military personnel, with more than 60 million individual records overall.
This breach doesn't exist in a vacuum. The FBI was hit around the same time by cybercrime group ShinyHunters, exposing sensitive records of personnel in intelligence roles. Separately, Chinese-linked hackers have been running targeted phishing campaigns against U.S. AI and defense policy experts, impersonating senior officials to steal credentials. No one has publicly tied these incidents together, but the pattern is hard to ignore. Foreign adversaries are methodically building a picture of who does what for the U.S. government.
The lawsuit will play out in court. What shouldn't wait for a verdict is a straight answer from the Pentagon on how this happened and what's different now. Service members didn't sign up to have their identities left unguarded. Patching the system was the floor, not the finish line.
Dear FRiends,
We need your continuing support to keep FR funded. Your donations are our sole source of funding. No sugar daddies, no advertisers, no paid memberships, no commercial sales, no gimmicks, no tax subsidies. No spam, no pop-ups, no ad trackers.
If you enjoy using FR and agree it's a worthwhile endeavor, please consider making a contribution today:
Click here: to donate by Credit Card
Or here: to donate by PayPal
Or by mail to: Free Republic, LLC - PO Box 9771 - Fresno, CA 93794
Thank you very much and God bless you,
Jim
Figures.... Texas had the same thing happen a few years ago with every state employee.... past and present. Have always been a proponent of paper records.... have to physically get your hands on them to utilize.
ROTFLMAO. The reality is just the opposite. Never trust the government for anything.
In 30 years with the DoD mine got stolen at least twice.
Unfortunately I’m afraid that’s just the world we live in.
Unfortunately I’m afraid that’s just the world we live in.
Im old enough to remember hard copy files. We didn’t have this problem back then.
Yes the digital age is far more convenient and a hell of a lot faster but the trade off is very dangerous things like this.
This is just the beginning and has happened a few times in the past decade. A few years ago I received a notification all my data from my government clearances ( Secret, MRPT) had been leaked. 10-15 years of past banking, housing, employment, salary, etc, details. All.
What does this mean? ALL digital records, even financial e money ( Bitcoin, Stablecoins) are at risk especially with AI advancements. For the E money types, good luck.
AI is one entity. Omnipotent. Everything Everywhere All at Once. People talk about different AI’s, but they are all the same. Once they meet in cyberspace they merge. 1-2-4-8-16-32-64-128..........................
Free credit monitoring by Equifax for a year. That’s what we get with all the data breaches that MAY have exposed our info. And, my info could have been involved in this as well.... 😠
So what? All that matters to Freepers are FLOCK cameras.
I still have my original transportation orders for BMT in my personnel file. Neatly typed on those travel orders are the names of everyone else traveling that day and their SSAN.
I am old enough to remember when Your SS card came with a nice letter saying ‘Do Not Share This Number With Anyone’.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.