Pentagon and FBI face data breaches, sparking national security fears

Recent data breaches at both the Pentagon and the Federal Bureau of Investigation (FBI) have triggered significant national security and cybersecurity concerns. A cybercriminal group known as ShinyHunters claimed responsibility for breaching the FBI's systems on September 22, 2026, allegedly stealing 2 to 3 terabytes of sensitive data pertaining to FBI personnel and job applicants. This compromised information reportedly includes personal details such as home addresses, phone numbers, dates of birth, and potentially details about roles in counterintelligence and electronic surveillance. The FBI is actively investigating these claims, which ShinyHunters asserted were in retaliation for a May 2026 FBI advisory that characterized the group as a cybercriminal enterprise. The FBI's jobs portal, FBIjobs.gov, was subsequently taken offline.

Concurrently, the Pentagon's Defense Manpower Data Center (DMDC) experienced a data breach that exposed the Social Security numbers and other personal information of current and former military personnel. A vulnerability in a DMDC file-sharing system allowed unauthorized access to unencrypted personally identifiable information (PII) between October 2025 and July 16, 2026, when the issue was discovered and remediated. Estimates suggest approximately four million Defense Department personnel may be affected, with exposed data encompassing names, dates of birth, contact information, and military occupational specialties. Although there is currently no indication of the misused data, experts view this information as a potential asset for foreign intelligence agencies and cybercriminals. The Pentagon is offering credit monitoring and identity restoration services to those impacted.