Between October 2025 and July 2026, hackers exploited a security vulnerability in an unencrypted file-sharing system run by the Defense Manpower Data Center (DMDC)—the Department of Defense's primary identity management and benefits record-keeping unit.
