Overview
The Defense Manpower Data Center (DMDC) is the U.S. Department of Defense’s central repository for personnel records — maintaining more than 60 million records covering active-duty and reserve troops, civilian employees, contractors, retirees, veterans, and military family members. Founded in 1974, DMDC handles identity verification for DoD ID card holders and authorizes benefits, training, and financial entitlements.
Recent Developments
- 2026-09/10: File-sharing system vulnerability allowed unauthorized access Oct 2025–Jul 16, 2026; breach notifications began Sept 2026 (2026-10-01-federal-agencies-hacks-sensitive-data)
- Scope: ~2.76M living + ~294K deceased individuals affected; exposed SSNs, DOB, contact info, sex, race, military job specialties — unencrypted on shared file system
- Discovery: Vulnerability found and patched July 16, 2026; ~9-month dwell time
- Status: Pentagon says no evidence of misuse; some sources cite up to ~4M potentially affected — scope still debated (2026-10-02-pentagon-dmdc-breach-military-times)
DMDC breach is separate from the FBI ShinyHunters FBIJobs.gov incident — different vulnerability, attacker, and timeline (2026-10-02-federal-breaches-hive-security).