Two Federal Agencies Targeted in Data Breaches Exposing Sensitive Information

The Pentagon has notified over 2 million current and former military personnel that their sensitive personal data has been compromised following a breach of one of its networks. This incident marks the second significant breach within a few months that has revealed critical government information.

According to a notification letter shared on Reddit, the stolen records contained a variety of personal details, including Social Security numbers, names, addresses, gender, race, and occupational specialties. The latter category is especially concerning as it could assist foreign intelligence agencies in identifying key military individuals. The hacking incident, which began in October, affected a system managed by the Defense Manpower Data Center, known for compiling Department of Defense personnel records. The Pentagon has confirmed that 2.8 million living individuals were impacted.

Implications of the Breach

This incident has raised alarms as it is the second instance in recent months where a major hack exposed sensitive US government personnel data. In the previous month, the ransomware group ShinyHunters claimed to have infiltrated FBI systems, obtaining records of numerous current and former employees, including those with responsibilities related to assessing threats from nations like China and Russia.

Although ShinyHunters asserted that it does not intend to release the stolen information, such assurances from a criminal organization with a history of hacking and extortion are not particularly credible. Moreover, the group’s cybersecurity measures are unlikely to withstand attempts by nation-state intelligence operatives. Recently, an official from the FBI urged members of the group to come forward.