Retirement Social Security

Pentagon Data Leak Exposed Millions of Social Security Numbers (Are You at Risk?)

Millions of people may be at risk of identity theft after a data breach.

By Paige Cerulli , Edited by Laura Hohenstein

Updated Oct. 9, 2026

Add Us On Google

Your Social Security number is used to maintain your Social Security record, including your reported earnings that affect your senior benefits. It's a number to carefully protect, since access to it may increase the risk of identity theft and fraud. News of a Pentagon personnel data breach indicates that Social Security numbers and other personal details were exposed, meaning current and former military members might be at risk of identity theft.

Here's what you should know about the data breach, whether you might be affected, and what actions you should take to protect yourself.

Now Available: The Definitive Guide to Retirement Income

Many successful investors eventually reach the same moment. The saving is done, the portfolio is built, and the question quietly changes from how much can I grow this to how much can I take out? Get that second question wrong and decades of good investing can come apart in a handful of years.

That is exactly what The Definitive Guide to Retirement Income helps answer.¹ <p class="">Investing in securities involves a risk of loss. Past performance is never a guarantee of future returns. Investing in foreign stock markets involves additional risks, such as the risk of currency fluctuations. Guides are provided by Fisher Investments. The publisher may be compensated when readers request a guide.</p> It covers what your retirement could actually cost, which income sources are worth using, and the withdrawal math that decides whether the money lasts. It is free today from Fisher Investments. Read More Here ›

How the personnel data breach happened

The Pentagon's Defense Manpower Data Center data breach occurred from October 2025 to July 2026, the data center disclosed in a September 19 letter. According to the letter, the issue was discovered on July 16 and has been patched. The Pentagon hasn't specified exactly how the information was accessed.

Unencrypted personal information may have been exposed during the breach, potentially including names, military occupations, Social Security numbers, dates of birth, contact information, sex, and race. Not only could that information expose the victims to identity theft, but there's concern about national security risks because the files included information about the jobs that military and civilian personnel performed.

Shopping for cheaper auto insurance? Enter your zip code here to get started.

Who was affected by the data breach

The affected Defense Manpower Data Center maintains more than 60 million personnel records for the Pentagon. Those records include data on active-duty and reserve troops, civilian employees, contractors, retirees, veterans, and military family members.

The data breach affected 2.76 million people; it also affected 294,000 individuals who are deceased.

Support for the data breach victims

Letters were sent to data breach victims on September 18; victims are being offered one year of free credit monitoring and identity restoration through IDX. According to the letters, there has not been any indication that the data has been misused.

Released: The Definitive Guide to Retirement Income (Sponsor)

Most people spend their entire working lives focusing on one thing: growing a pile of money. Then they retire and discover the skill they actually need is close to the opposite. Turning that pile into steady income, year after year, through good markets and bad, without ever running out. It may be the least discussed and most consequential transition in personal finance, and plenty of otherwise careful investors walk into it with no real plan.

That is exactly what The Definitive Guide to Retirement Income helps answer.¹ <p class="">Investing in securities involves a risk of loss. Past performance is never a guarantee of future returns. Investing in foreign stock markets involves additional risks, such as the risk of currency fluctuations. Guides are provided by Fisher Investments. The publisher may be compensated when readers request a guide.</p> It is a free guide from Fisher Investments covering what your retirement will really cost, where the cash flow should come from, and how much you can safely withdraw each year. Learn More Here ›

The potential vulnerability concerns

Since this data breach involves military members and includes data on military occupations and specialties, it potentially carries extra risk. It's possible that such information might have counterintelligence value, and it might help U.S. enemies to identify or even approach individuals who hold sensitive roles in the military.

The types of information exposed also might put victims at risk of identity theft, phishing, and impersonation schemes. Social Security numbers were exposed, and they were paired with biographical information, like age, sex, and race. This comprehensive personal information might allow criminals to more easily scam victims of the data breach.

How often data breaches occur

This data breach impacts military members, rather than the general population, but data breaches occur frequently, so it's possible that you might find yourself to be a victim of such a breach one day.

According to SentinelOne, cyber attacks have reached an all-time high, and there are an average of 2,090 cyber attacks every week, a 17% increase in 2026. The HIPAA Journal reports that between September 1, 2025, and January 31, 2026, an average of 47 data breaches were reported each month; that data reflects just healthcare breaches.

Personal customer information, including tax identification numbers, email addresses, phone numbers, and home addresses, is exposed in about 53% of all data breach incidents.

What victims of any data breach should do

If you're the victim of a data breach, watch carefully for any letters and information containing information about the steps the company is taking, such as whether you'll be offered free credit monitoring or any compensation.

It's a good idea to freeze your credit with all three credit bureaus if you haven't done so already. Freezing your credit prevents creditors from accessing your credit report, making it more difficult for identity thieves to open new accounts using your name. If you plan to apply for credit, such as if you want to open a new credit card, you may temporarily lift the credit freeze.

Additionally, carefully monitor your accounts for unusual or unauthorized activity. Pull your credit report and check for any lines of credit that you haven't authorized. Regularly check your bank account, credit card statements, and any other financial accounts for unusual activity, and immediately report any activity that you don't recognize.

Retirement News: Almost 80% of Americans fear a retirement age increase — here’s the real reason why

The long-lasting impact of data breaches

The potential damage of a data breach isn't immediate. Instead, the data exposed may create a long-term list, and criminals may be able to use it for years. If criminals combine the data accessed with additional information from public records and social networks, they may be able to create highly realistic phishing and fraud campaigns.

Though data breaches like the Pentagon breach offer a year of free credit monitoring, victims may need to stay vigilant because the risk doesn't necessarily end after the one-year point.

Bottom line

The Pentagon data breach is just one example of the potential damage that such breaches may cause, and they're becoming more frequent. It's essential for companies to promptly respond to data breaches, and you may also need to take an active role in monitoring your finances to reduce your own financial vulnerability.

If your information has been exposed in a data breach and you think you may be a victim of data theft, promptly report the issue to the Federal Trade Commission (FTC). The FTC creates a personal recovery plan to help you recover from identity theft and avoid any financial mistakes.

More from FinanceBuzz: