A breach in the human resources database of the United States Department of Defense (DMDC), which lasted for several months, exposed the personal information of millions of military personnel and their dependents. According to reports, this breach involved information on 2.76 million "living individuals" and 294,000 "deceased individuals."
Details of the Breach
Anonymized Pentagon officials confirmed that this breach led to the exposure of critical information, including social security numbers and employment details of individuals associated with the Department of Defense. This issue was first reported by Military Times, which referenced a letter regarding the notification about the data breach.
Read more: U.S. Revokes Visas of Latin American Officials Accused of Corruption
It is still unclear which files were accessed and who was behind this breach. The Department of Defense has also made updates to the file-sharing system to address vulnerabilities and has stated that there is no indication of misuse of the information related to the recipients.
Security Risks
The duration of this breach and the large volume of personal information exposed pose serious security risks for many personnel associated with the Department of Defense. Cybersecurity experts have warned that this could facilitate phishing attempts and other security violations. DMDC is responsible for collecting personnel information, human resources, training, financial, and other data for the Department of Defense, which includes over 60 million individuals, including military personnel, civilians, contractors, and families.
This incident comes as the FBI has confirmed that it is investigating a cyberattack by the hacking group ShinyHunters on its job website. This group claims to have stolen highly sensitive data about nearly all agents and job applicants. In this attack, it is estimated that information such as home addresses and social security numbers may also have been stolen.
Credit Monitoring Services
DMDC has announced that it is providing credit monitoring and identity restoration services for one year through IDX, a private company, to affected personnel. According to the Federal Trade Commission, any individual can request a credit freeze for free from any of the three major credit bureaus (Equifax, Experian, and TransUnion).
Active personnel and National Guard members can also receive free electronic credit monitoring services to identify potential issues arising from identity theft. Given the security threats posed by access to such a large volume of information, security experts have warned of the consequences and emphasized that such breaches cannot simply be overlooked.
Read more: Authorities in Paraguay Uncover Gold Smuggling Network · Pentagon Changes General Promotion Process
