DoD Says Hackers Stole Personal Data of Millions of Service Members in Extended Breach

The U.S. Department of Defense disclosed that a multi‑month cyber intrusion led to the exfiltration of personal records of millions of active and former service members.

The department said the breached data comprises identifiers like names, birth dates and service numbers, as well as other details commonly stored in personnel files. Although officials have not released the full extent of the compromised material, they warn that the incident could leave service members vulnerable to identity‑theft.

DoD officials reported that the intrusion was detected during a standard security review, which triggered prompt notifications to those affected. The agency is working alongside the Cybersecurity and Infrastructure Security Agency, the Federal Bureau of Investigation and additional federal partners to locate the perpetrators and evaluate the overall impact.

Service members and veterans who got the alert have been urged to keep an eye on their credit reports, consider placing fraud alerts, and adhere to recommendations for safeguarding personal data. The department also committed to offering resources to anyone who might fall victim to fraud stemming from the breach.

This episode contributes to an increasing trend of advanced cyber attacks aimed at U.S. defense and governmental networks. In recent years, notable breaches like the SolarWinds supply‑chain compromise and ransomware strikes on critical infrastructure have highlighted the broadening threat environment that federal agencies must contend with.

Going forward, the DoD indicated it will persist with its investigation, roll out extra safeguards, and collaborate with Congress on possible legislative actions to bolster the protection of military personnel data. Those impacted can anticipate continual updates as the agency fine‑tunes its response and works to prevent additional damage.