The breach affected 2.76 million living people and 294,000 deceased individuals, the official said. The exposed information included Social Security numbers and details about the jobs held by military and civilian personnel. The nature of the information has raised concerns about the potential national security implications. The unauthorised access took place between October 2025 and July 2026, when the vulnerability was discovered and fixed.
