Hackers exploited a file-sharing vulnerability from October 2025 to mid-July 2026, stealing unencrypted Pentagon records containing Social Security numbers and other personal and service data. About 2.8 million living and nearly 300,000 deceased people were affected.