FBI and Pentagon Suffered Massive Data Breaches
Federal agencies have confirmed separate incidents exposing sensitive personnel information to unauthorized users.
Updated on Sept. 26, 2026 in Cybersecurity
Live Poll
Do you trust federal agencies to secure your sensitive personal information from cyberattacks?
The FBI and the Pentagon have confirmed significant data breaches affecting the private information of millions of individuals. The incidents involved the theft of two to three terabytes of FBI server data and the exposure of personal records from the Pentagon.
Why it matters
The breaches compromise highly sensitive medical and psychiatric evaluations alongside Social Security numbers, raising concerns about potential exploitation by foreign adversaries. The Pentagon's failure to encrypt millions of records within its human resources system highlights critical vulnerabilities in federal data management.
The FBI breach involved the theft of two to three terabytes of server data, while the Pentagon breach exposed the information of 4 million individuals out of the 60 million total records held by the Defense Manpower Data Center.
The players
FBI
The Federal Bureau of Investigation is the principal domestic intelligence and security service of the United States.
Pentagon
The Pentagon serves as the headquarters of the United States Department of Defense.
ShinyHunters
ShinyHunters is a hacking collective known for executing large-scale data thefts and selling stolen information.
Defense Manpower Data Center
This facility maintains personnel and financial databases for the U.S. Department of Defense.
The details
Hackers identified as the group ShinyHunters extracted FBI files, including sensitive psychiatric and medical evaluations of personnel. Simultaneously, unauthorized users accessed unencrypted records from the Defense Manpower Data Center that contained the Social Security numbers of four million people.
Timeline
The Pentagon data breach began in October 2025.
The Defense Manpower Data Center held 60 million records in fiscal year 2024.
The Pentagon breach was discovered and fixed in July 2026.
FBI data breach details emerged in September 2026.
The Tech Race
These incidents follow the pattern of large-scale federal credential theft established by the 2015 Office of Personnel Management data breach. The reliance on unencrypted legacy databases continues to be a primary weakness in the broader federal infrastructure security arms race.
Affected personnel may face a heightened risk of identity theft and fraud due to the exposure of Social Security numbers. Individuals impacted by the breaches will likely need to enroll in credit monitoring services to mitigate the long-term consequences of their personal information being exposed.
The takeaway
The exposure of unencrypted data underscores the vital importance of robust encryption standards for all government personnel records. Protecting sensitive psychiatric and medical information must become a top priority to prevent foreign intelligence agencies from leveraging this data.
Further reading
For more context on federal network vulnerabilities, explore our Cybersecurity section.
Source note: This article includes information reported by The Daily Beast.
Live Poll
Do you trust federal agencies to secure your sensitive personal information from cyberattacks?
