// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / US Department of Defense
Breach Record

US Department of Defense

DISCLOSED 2026-10-04 · MISCONFIG · 2,700,000 RECORDS EXPOSED

A bug in a file-sharing service exposed sensitive data of 2.7 million US military personnel. The exposed data includes names, military service records, and Social Security numbers. The breach occurred over a period of months.

The record

What we know

Disclosed
2026-10-04
Attack vector
Misconfig
Sector
Government
Country
United States
Records exposed
2,700,000
Domain
defense.gov
Data classes exposed
namesmilitary service recordsSocial Security numbers
Sources

Cited reporting

↗ www.techradar.com
Similar vector · recent

Other misconfig breaches on file

McDonald's · 2026-10-04 McDonald's · 2026-10-03 McDonald's · 2026-10-02 McDonald's · 2026-10-01 Supabase customers · 2026-09-29 Supabase customers · 2026-09-28 Supabase customers · 2026-09-27 Surfshark · 2026-09-11

This page is the permanent ColdRecon entry for the US Department of Defense disclosure. It updates if new public reporting emerges. All tracked breaches →

US Department of Defense just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →