The FBI and Pentagon both reported major personnel-data breaches. Reports say ShinyHunters allegedly stole about 2–3 TB of FBI files, including medical and psychiatric evaluations. Separately, a DMDC intrusion exposed Social Security numbers and other personal data for potentially millions. Officials say they are investigating and taking steps to strengthen cybersecurity, and so far report no confirmed misuse.
FBI And Pentagon Personnel Systems Breached; Offices Linked To Kash Patel And Pete Hegseth Affected
Photo Illustration by Victoria Sunday/The Daily Beast/Getty Images/Reuters
Workplaces tied to senior officials Kash Patel and Pete Hegseth have been hit by major data breaches that exposed sensitive personnel records at both the FBI and the Pentagon.
FBI Breach: Medical And Psychiatric Records Among Stolen Data
New reporting says the hacking collective ShinyHunters allegedly extracted roughly 2–3 terabytes of data from FBI servers. The haul reportedly includes medical and psychiatric evaluations for FBI applicants and personnel.
Examples described in reports include records noting an applicant's aspirin use and allergies to dust and cats, a file marking "symptoms of depression" in high school, results from an electrocardiogram (ECG), and blood and urine test results. Such files contain highly sensitive personal-health information that could be exploited by adversaries or criminals.
The FBI says it is investigating the breach of sensitive personnel data. / Kylie Cooper / REUTERS
"I would be shocked if Russian intelligence isn't knocking on their door and saying, 'We want that stuff, hand it over,'" cybersecurity consultant and former FBI operative Eric O'Neill told Reuters.
The FBI has acknowledged claims of unauthorized activity affecting FBIjobs.gov and said it is investigating. The bureau declined further comment to some outlets at the time reports were published.
Pentagon/DMDC Breach: Social Security Numbers And More
A separate intrusion affected the Pentagon's human resources system maintained by the Defense Manpower Data Center (DMDC). According to reporting, the compromise began in October and went undetected and unremediated until July.
The DMDC notified affected individuals that "unauthorized users" accessed Social Security numbers and other personal information for current and former service members. In some cases, occupational specialty data for service members was accessed. Military Times reported that as many as 4 million people could have had information exposed.
As many as 4 million Pentagon personnel could be affected by the breach. / Ken Cedeno / REUTERS
The DMDC letter said the Pentagon currently has "no indications of misuse" of the unencrypted data, but it warned that foreign adversaries or cybercriminals could still target the records. The DMDC reported it housed at least 60 million records in Fiscal Year 2024 and highlighted the wide range of federal functions that rely on its systems.
Officials say they are taking steps to investigate both incidents and enhance cybersecurity protections for the affected systems.
Why This Matters
Both breaches involve highly sensitive personal data that could be used for identity theft, targeted social engineering, or foreign intelligence collection. Investigations and remediation efforts will be critical to limit harm to affected individuals and to restore confidence in federal personnel systems.
Help us improve.
