Defense Manpower Data Center (DMDC) hit by network compromise
Incident
Summary
Hide ▲
Show ▼
The Defense Manpower Data Center (DMDC) disclosed a breach of the Pentagon human resources management system that exposed sensitive personnel data for more than 3 million people. The compromise involved unauthorized access through file-sharing systems and put PII and other military records at risk.
Related Happenings
FBI employee and applicant data leak claim
Data Leak
H score95
First: 22.09.2026 22:13
Last: 22.09.2026 22:13
Sources 1
About this happening:
ShinyHunters remains tied to the FBIJobs.gov data-leak Happening, where the group claimed it used an Oracle PeopleSoft zero-day to reach FBI systems, moved into ...
FBI employee and applicant data leak claim
Data LeakAbout this happening: ShinyHunters remains tied to the FBIJobs.gov data-leak Happening, where the group claimed it used an Oracle PeopleSoft zero-day to reach FBI systems, moved into ...
Latest development: 06.10.2026 09:56
The FBI said its review determined that the FBI employee-data theft stemmed from a security failure on a third-party Oracle PeopleSoft platform after a contractor failed to implement a security patch, and the bureau removed the contractor while taking steps to mitigate further risk and protect its workforce.
FBI disrupts quartermaster infrastructure for Chinese espionage
Law Enforcement
H score33
First: 26.08.2026 17:17
Last: 26.08.2026 17:17
Sources 1
About this happening:
FBI disrupted infrastructure used by a technical quartermaster that enabled Chinese cyber espionage, removing reconnaissance, proxy management, and routing...
FBI disrupts quartermaster infrastructure for Chinese espionage
Law EnforcementAbout this happening: FBI disrupted infrastructure used by a technical quartermaster that enabled Chinese cyber espionage, removing reconnaissance, proxy management, and routing...
FortiBleed Fortinet/FortiGate VPN credential leak
Data Leak
H score80
First: 17.06.2026 18:12
Last: 17.06.2026 18:12
Sources 1
About this happening:
FortiBleed is a Fortinet/FortiGate credential leak and ongoing abuse campaign centered on exposed FortiGate firewalls and SSL VPN gateways. The leak was first tied...
FortiBleed Fortinet/FortiGate VPN credential leak
Data LeakAbout this happening: FortiBleed is a Fortinet/FortiGate credential leak and ongoing abuse campaign centered on exposed FortiGate firewalls and SSL VPN gateways. The leak was first tied...
Latest development: 08.10.2026 00:28
The FBI says FortiBleed attacks are still ongoing against exposed Fortinet FortiGate firewalls and SSL VPN gateways, where attackers use leaked credentials and cracked password hashes to create administrator accounts, delete existing admin accounts or change their passwords, and lock out legitimate administrators. The attack chain has also been observed as an initial entry point for ransomware affiliates including INC/Lynx ransomware and Payload ransomware, while operators use a distributed GPU cluster with Hashcat and Hashtopolis to crack stolen password hashes.
North Korean remote IT worker scam operation targeting American companies
Campaign
H score41
First: 16.04.2026 19:00
Last: 16.04.2026 19:00
Sources 1
About this happening:
A long-running North Korean remote IT worker scam operation used stolen identities and fake placements to embed operators inside more than 100 American companies. The...
North Korean remote IT worker scam operation targeting American companies
CampaignAbout this happening: A long-running North Korean remote IT worker scam operation used stolen identities and fake placements to embed operators inside more than 100 American companies. The...
Timeline
-
01.10.2026 12:44 2 articles · 12d ago
Defense Manpower Data Center notifies military personnel of Pentagon data breach
Initial DisclosureDMDC notified affected military personnel that hackers breached the Pentagon human resources management system in October 2025 and that a small number of unauthorized users accessed sensitive personnel data, including personally identifiable information, between October 2025 and July 2026 by exploiting a vulnerability in file-sharing systems. Pentagon officials said the breach affects more than 3 million people, and DMDC said it immediately initiated privacy and cybersecurity incident response actions and is offering 12 months of free credit monitoring through IDX.
Show sources
- Hackers stole Pentagon personnel records of over 3 million people — www.bleepingcomputer.com — 01.10.2026 12:44
- Hackers stole Pentagon personnel records of over 3 million people — www.bleepingcomputer.com — 01.10.2026 12:44