Military Records and Social Security Numbers Exposed in Pentagon Breach

A months-long breach at the Pentagon exposed Social Security numbers and military records belonging to millions of service members and their families. The breach wasn't discovered immediately, which means the exposed data has been at risk for some time.

Who was affected?

Anyone with a military connection, including active duty personnel, veterans, retirees, and their family members, may be in this breach. The exposed information includes Social Security numbers, names, and other personal details stored in Pentagon systems. If you or someone in your household has military service history, it's worth assuming your data was caught in this breach.

What should I do now?

Start by placing a fraud alert with the three major credit bureaus: Equifax, Experian, and TransUnion. A fraud alert is free and tells creditors to verify your identity before opening new accounts in your name. You can file this alert with one bureau online, and it automatically applies to all three. You can also freeze your credit, which is a stronger step that blocks creditors from viewing your credit report entirely without your permission. Both options are free. If you have military family members, contact them and encourage them to do the same.

Monitor your credit reports for suspicious activity. You're entitled to one free credit report per bureau per year through annualcreditreport.com. Check for accounts or inquiries you don't recognize. If you notice fraud, file a report with the FTC at reportidentitytheft.ftc.gov.

Should I be worried about my financial accounts?

Not yet, but stay alert. Your Social Security number alone doesn't give a scammer direct access to your bank accounts. However, it does give them enough information to apply for credit in your name, like a credit card, a loan, or even utility accounts. That's why the fraud alert and credit freeze are your first moves. They don't prevent fraud, but they make it harder and slower, which often causes scammers to move on to easier targets.

Will I be notified?

The Pentagon should contact affected individuals, though you may not hear about it immediately. Don't wait for a letter. If you have military service history, treat yourself as affected and take the steps above now. If you receive a notification later, you'll have already protected yourself.

You're not exposed because of anything you did. A breach is a failure of security on the organization's end. Taking these protective steps puts the control back in your hands.