Find notable cyber news and cases, enriched with sources, timelines, and signals.

Defense Manpower Data Center (DMDC) hit by network compromise

Incident
First reported
Last updated
Happening score
H score 18
1 unique sources, 1 articles

Summary

Hide ▲

The Defense Manpower Data Center (DMDC) disclosed a breach of the Pentagon human resources management system that exposed sensitive personnel data for more than 3 million people. The compromise involved unauthorized access through file-sharing systems and put PII and other military records at risk.

Related Happenings

FBI employee and applicant data leak claim

Data Leak
H score95 First: 22.09.2026 22:13 Last: 22.09.2026 22:13 Sources 1

About this happening: ShinyHunters remains tied to the FBIJobs.gov data-leak Happening, where the group claimed it used an Oracle PeopleSoft zero-day to reach FBI systems, moved into ...

Latest development: 06.10.2026 09:56

The FBI said its review determined that the FBI employee-data theft stemmed from a security failure on a third-party Oracle PeopleSoft platform after a contractor failed to implement a security patch, and the bureau removed the contractor while taking steps to mitigate further risk and protect its workforce.

FBI disrupts quartermaster infrastructure for Chinese espionage

Law Enforcement
H score33 First: 26.08.2026 17:17 Last: 26.08.2026 17:17 Sources 1

About this happening: FBI disrupted infrastructure used by a technical quartermaster that enabled Chinese cyber espionage, removing reconnaissance, proxy management, and routing...

FortiBleed Fortinet/FortiGate VPN credential leak

Data Leak
H score80 First: 17.06.2026 18:12 Last: 17.06.2026 18:12 Sources 1

About this happening: FortiBleed is a Fortinet/FortiGate credential leak and ongoing abuse campaign centered on exposed FortiGate firewalls and SSL VPN gateways. The leak was first tied...

Latest development: 08.10.2026 00:28

The FBI says FortiBleed attacks are still ongoing against exposed Fortinet FortiGate firewalls and SSL VPN gateways, where attackers use leaked credentials and cracked password hashes to create administrator accounts, delete existing admin accounts or change their passwords, and lock out legitimate administrators. The attack chain has also been observed as an initial entry point for ransomware affiliates including INC/Lynx ransomware and Payload ransomware, while operators use a distributed GPU cluster with Hashcat and Hashtopolis to crack stolen password hashes.

North Korean remote IT worker scam operation targeting American companies

Campaign
H score41 First: 16.04.2026 19:00 Last: 16.04.2026 19:00 Sources 1

About this happening: A long-running North Korean remote IT worker scam operation used stolen identities and fake placements to embed operators inside more than 100 American companies. The...

Timeline

  1. 01.10.2026 12:44 2 articles · 12d ago

    Defense Manpower Data Center notifies military personnel of Pentagon data breach

    Initial Disclosure

    DMDC notified affected military personnel that hackers breached the Pentagon human resources management system in October 2025 and that a small number of unauthorized users accessed sensitive personnel data, including personally identifiable information, between October 2025 and July 2026 by exploiting a vulnerability in file-sharing systems. Pentagon officials said the breach affects more than 3 million people, and DMDC said it immediately initiated privacy and cybersecurity incident response actions and is offering 12 months of free credit monitoring through IDX.

    Show sources