Sean Lyngaas and Davis Winkie report: A data breach at the Pentagon’s vast HR system has exposed Social Security numbers and other personal information of current and former military personnel, raising counterintelligence concerns among national s...
Official statutory regulatory filing submitted by U.S. Department of Defense (Pentagon) to U.S. DoD Privacy Office pursuant to applicable data breach disclosure mandates.
The U.S. Department of Defense (Pentagon) cybersecurity event represents a confirmed Network Intrusion & Data Exfiltration within the Government & Defense sector, carried out by an unidentified cyber threat actor. Discovered through technical indicators and regulatory breach filings, the event resulted in unauthorized access to sensitive internal IT environments, impacting approximately 240,000 individuals and records.
Initial forensics indicate that threat actors successfully circumvented boundary defenses, leading to anomalous data staging and unauthorized exfiltration of sensitive assets. Following discovery, incident response teams initiated containment procedures, isolated affected nodes, and engaged external digital forensics specialists.
Forensic telemetry and statutory disclosure filings confirm exposure of the following sensitive asset categories:
In adherence to statutory breach notification mandates, official filings have been registered with federal and state regulatory authorities to inform affected stakeholders and oversight bodies. Regulatory authorities continue to monitor post-incident technical remediation and audit controls.
Pentagon data breach of military personnel raises national security concerns
Pentagon Personnel Agency Data Breach Impacts 3 Million People
Hackers stole Pentagon personnel records of over 3 million people
This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.
