Hackers stole millions of US military personnel records during months-long data breach

The headline number here is "millions," but the more damning figure is the one the DoD hasn't shared: how long the intruders had access before anyone noticed. A months-long dwell time in a military personnel system isn't a blip—it's a systemic failure. In an era where commercial breach detection is measured in hours, a sustained intrusion into one of the most sensitive databases in the federal government suggests either a highly capable adversary, dangerously inadequate monitoring, or both. What makes this breach different from the endless parade of corporate data leaks is the nature of the data itself. Military personnel records are not ordinary PII. They are a composite profile—names, addresses, family details, career history, and affiliations—that retains intelligence value for decades. For a foreign intelligence service, this is a targeting database: a way to identify, track, and potentially exploit individuals with a direct connection to the U.S. military. The identity-theft angle is real, but it's arguably the least interesting consequence. The strategic value of this data appreciates over time, which means the fallout here could outlast the careers of the people affected. This incident also fits a broader, uncomfortable pattern. Government agencies have spent years trying to modernize legacy systems while facing adversaries who are increasingly