The Pentagon is Hacked.. and Data of 4 Million Military Personnel Leaked

Listen to the article, the audio text is automatically generated by a machine system.

The massive human resources system of the U.S. Department of Defense, the "Pentagon," was hacked, revealing Social Security numbers and other personal information of current and former military personnel, in an incident that raised widespread concerns regarding counterintelligence among national security experts, especially as it coincides with a direct military confrontation that Washington is facing with Iran.

A message sent by the Defense Manpower Data Center (DMDC) to those affected by the breach showed that "unauthorized users" were able to access a vulnerable computer server belonging to the center starting last October, but the Pentagon did not discover and address the issue until nine full months later, in July, according to CNN.

While the exact number of records affected by the breach remains unknown, the Military Times reported that about 4 million individuals from the U.S. Department of Defense may be among those affected.

The Pentagon confirmed in its message that there are currently no indications of misuse of the data that was compromised.

However, this did not prevent the message itself from indicating that one type of data that hackers were able to access in some cases was the "job specialty" of military personnel, a detail that may seem simple but carries serious implications when combined with other data.

The message also indicated that the stolen data was not encrypted, even though encrypting sensitive information is technically a globally accepted security practice to protect this type of records.

In contrast, it is still unknown who is behind the hacking operation.

The combination of job specialty information with other datasets that use identifiers such as Social Security numbers poses a compounded risk, as it may give U.S. adversaries a clearer picture of the identities of individuals performing specific tasks for the U.S. military in various parts of the world.

U.S. Army leaders have repeatedly warned their troops that their phones and online accounts could become direct targets during the ongoing war with Iran.

The U.S. Central Command, which has responsibilities in the Middle East and other areas, informed Congress members last spring that it had received multiple reports about threats related to adversaries exploiting commercial location data to target or monitor U.S. military personnel in the operational theater.

In this context, Justin Sherman, CEO of Global Cyber Strategies consulting and author of an upcoming book on the data broker industry, stated that any malicious entity could combine information extracted from the human resources data center with other commercial data sets, allowing them to learn more about Department of Defense individuals or even target them based on their income, debts, marriages, spending habits, and online activities.

He further explained that the exposure of personal data of potentially millions of military service members poses a risk in itself, especially at a time when the United States is engaged in a war with Iran and competing with multiple other governments, adding that a foreign adversary obtaining such a vast amount of data could enable them to conduct phishing operations, create accurate profiles of individuals, and execute outreach attempts from foreign intelligence agencies.

It is worth noting that the human resources data center serves as the 'single central access point' for information related to benefits, entitlements, and 'medical readiness' for Department of Defense personnel, veterans, and their families.

Its services also support multiple vital government entities, including the legislative authority, humanitarian services, national defense, labor, healthcare, financial sector, veterans affairs, and research.