DoD Says Hackers Stole Personal Information of Millions of Service Members Over Extended Intrusion

The U.S. Department of Defense disclosed that a multi‑month cyber intrusion led to the exfiltration of personal records of millions of active‑duty and former service members.

The department indicated that the breached data comprises identifiers like names, birth dates and service numbers, as well as other details normally stored in personnel files. Although the full extent of the stolen information remains undisclosed, officials warn that the incident could leave service members vulnerable to identity‑theft.

DoD officials reported that the intrusion was detected during a standard security audit, which triggered swift notifications to those affected. The department is working alongside the Cybersecurity and Infrastructure Security Agency, the Federal Bureau of Investigation and additional federal partners to locate the perpetrators and evaluate the overall impact.

Service members and veterans who were alerted are urged to keep an eye on their credit reports, contemplate fraud alerts, and adhere to recommendations for safeguarding personal data. The department also committed to offering resources to anyone who might fall victim to fraud stemming from the breach.

This breach joins an increasing trend of advanced cyber attacks aimed at U.S. defense and governmental networks. In recent years, notable incidents like the SolarWinds supply‑chain compromise and ransomware attacks on critical infrastructure have highlighted the widening threat environment that federal agencies must contend with.

Going forward, the DoD indicated it will persist with its investigation, introduce extra safeguards, and collaborate with Congress on possible legislative steps to bolster protection of military personnel data. Those impacted can anticipate continued updates as the agency hones its response and strives to limit any additional damage.