Pentagon Hacked.. Data of 4 Million Military Personnel Leaked

Listen to the article. The audio text is automatically generated by a machine system.

The massive human resources system of the U.S. Department of Defense, the "Pentagon," was hacked, revealing Social Security numbers and other personal information of current and former military personnel, in an incident that raised widespread concerns regarding counterintelligence among national security experts, especially as it coincides with a direct military confrontation that Washington is facing with Iran.

A message sent by the Defense Manpower Data Center (DMDC) to those affected by the breach indicated that "unauthorized users" were able to access a vulnerable computer server belonging to the center as of last October, but the Pentagon did not discover and address the issue until 9 full months later, in July, according to CNN.

While the exact number of records affected by the breach remains unknown, the "Military Times" reported that about 4 million individuals from the U.S. Department of Defense may be among those affected.

The Pentagon confirmed in its message that there are currently no indications of misuse of the breached data.

However, this did not prevent the same message from noting that one type of data that hackers were able to access in some cases was the "job specialty" of military personnel, a detail that may seem simple but carries serious implications when combined with other data.

The message also indicated that the stolen data was not encrypted, although encrypting sensitive information is technically a globally recognized security practice to protect this type of records.

Meanwhile, it remains unknown who is behind the breach.

The combination of job specialty information with other datasets that use identifiers such as Social Security numbers poses a compounded risk, as it may give U.S. adversaries a clearer picture of the identities of individuals performing specific tasks for the U.S. military in various parts of the world.

U.S. Army leaders have repeatedly warned their troops that their phones and online accounts could become direct targets during the ongoing war with Iran.

The U.S. Central Command, which has responsibilities in the Middle East and other areas, informed Congress members last spring that it had received multiple reports of threats related to adversaries exploiting commercial location data to target or monitor U.S. military personnel in the operational theater.

In this context, Justin Sherman, CEO of "Global Cyber Strategies" consulting and author of an upcoming book on the data broker industry, stated that any malicious entity could combine information extracted from the Defense Manpower Data Center with other commercial datasets, allowing them to learn more about Department of Defense personnel or even target them based on their income, debts, marriages, spending habits, and online activities.

He explained that the exposure of personal data for potentially millions of military personnel represents a risk in itself, especially at a time when the United States is at war with Iran and competing with multiple other governments, adding that a foreign adversary obtaining such a vast amount of data could enable them to conduct phishing operations, create accurate profiles of individuals, and carry out outreach attempts by foreign intelligence agencies.

It is worth noting that the Defense Manpower Data Center serves as the "single central access point" for information related to benefits and entitlements and "medical readiness" for Department of Defense personnel, veterans, and their families.

Its services also support multiple vital government entities, including legislative authority, humanitarian services, national defense, labor, healthcare, veterans affairs, and research.