Pentagon breach exposes failure to follow its own standards | TechTarget
A months-long security vulnerability in a Pentagon personnel system exposed sensitive information belonging to more than three million people, highlighting the risks organizations face when attackers gain access to systems that store large volumes of sensitive data.
The breach at the Defense Manpower Data Center (DMDC) wasn't the result of a sophisticated cyberattack. It was a failure of fundamental security controls -- encryption, access management and monitoring -- at an organization that helps set cybersecurity standards for the entire federal government. The incident serves as a reminder that even well-resourced agencies with strict compliance mandates can fall short when basic protections aren't consistently implemented and maintained.
The DMDC, a Department of Defense organization responsible for maintaining personnel, manpower, training and other records for military and civilian populations, was compromised when unauthorized users accessed personally identifiable information through a vulnerable file-sharing system between October 2025 and July 2026.
The affected data...
Copyright of this story solely belongs to www.techtarget.com. To see the full text click HERE
