DoD Confirms Hackers Accessed Personal Data of Millions of Service Members in Prolonged Breach

The U.S. Department of Defense announced that a cyber intrusion spanning several months resulted in the theft of personal records belonging to millions of current and former military personnel.

According to the department, the compromised information includes identifiers such as names, dates of birth and service numbers, along with other data typically held in personnel files. While the exact scope of the stolen material has not been fully disclosed, officials stress that the breach could expose service members to identity‑theft risks.

DoD officials said the breach was uncovered during a routine security review, prompting an immediate notification to affected individuals. The department is collaborating with the Cybersecurity and Infrastructure Security Agency, the Federal Bureau of Investigation and other federal partners to trace the attackers and assess the full impact.

Service members and veterans who received the notice have been advised to monitor credit reports, consider fraud alerts and follow guidance on protecting personal information. The department also pledged to provide resources for those who may become victims of fraud as a result of the exposure.

The incident adds to a growing pattern of sophisticated cyber operations targeting U.S. defense and government networks. Recent years have seen high‑profile intrusions such as the SolarWinds supply‑chain attack and ransomware assaults on critical infrastructure, underscoring the expanding threat landscape that federal agencies must navigate.

Looking ahead, the DoD said it will continue its investigation, implement additional safeguards and work with Congress on potential legislative measures to strengthen the security of military personnel data. Affected individuals can expect ongoing updates as the agency refines its response and seeks to mitigate any further harm.