Major breaches at Pentagon and FBI expose millions of government employee records

The Pentagon disclosed a monthslong breach affecting over 2.8 million current and former military personnel records, exposing Social Security numbers, addresses, and occupational specialties that could help foreign intelligence agencies identify high-value targets. This marks the second major government data breach in recent months, following a separate compromise of FBI employee records claimed by the ransomware group ShinyHunters, which included sensitive job titles related to investigations into China and Russia. The FBI has publicly called on ShinyHunters members to surrender, warning that law enforcement is actively investigating the criminal group.

The Pentagon breach originated from an October 2025 intrusion into the Defense Manpower Data Center, a repository managing over 60 million personnel files across military, civilian, and contractor categories. The stolen dataset's occupational details present particular intelligence value, allowing foreign powers to identify and target individuals with specialized knowledge or access. This incident follows a similar compromise of FBI systems where ShinyHunters obtained employee records containing job classifications related to counterintelligence operations against major adversaries.

The scale of these recent incidents recalls the 2015 Office of Personnel Management hack, widely attributed to Chinese state actors, which compromised 22.1 million background investigation records including biometric data. Officials have not disclosed the breach vector, ransom communications, or methodology confirming the data remains uncompromised in criminal hands.