五角大楼遭集体诉讼：逾300万军人数据泄露数月 原告指国防部未妥善防护未加密信息
据路透社报道，美国国防部本周面临一宗集体诉讼：原告指国防部未能保护敏感个人身份信息，一次网络入侵使数百万现役与退役军人的数据暴露长达数月。
诉讼本周一在位于华盛顿的联邦法院提起，案号1:26-cv-03667，案名为Edwards诉美国战争部。两名原告分别为一名现役与一名退役海军陆战队员，拟代表逾300万名美国军人组成的群体索赔，索赔金额超过500万美元。原告律师为Migliaccio & Rathod律所的Jason Rathod与Nicholas Migliaccio。
诉状称，泄露发生在国防部下属的国防人力数据中心（DMDC），社保号码、出生日期等军人个人信息在数月内处于暴露状态，诉状指五角大楼「公然漠视军人及其他军方相关人员的隐私利益」。诉状还称，入侵者利用一个人事记录文件共享系统的漏洞，接触到未加密的个人数据。
这起泄露于上月披露。据此前公开报道引述国防部官员的说法，受影响人数超过300万，其中约276万为在世人员、约29.4万为已故人员；未授权访问发生于2025年10月至2026年7月16日漏洞被发现并修复之间，每人被暴露的信息类别不尽相同，可包括姓名、联系方式、出生日期、社保号码与军种岗位信息。国防部此前表示暂无信息被滥用的迹象，并通过IDX公司为受影响人员提供一年信用监控与身份恢复服务。
五角大楼与原告律师均未立即回应路透社的置评请求。路透社指出，联邦机构近年多次遭遇网络入侵：人事管理局曾在2022年同意支付6,300万美元，和解一宗代表数百万联邦雇员提起的集体诉讼。
Pentagon Hit With Class Action Over Data Breach Exposing Millions of Service Members' Data
The U.S. Defense Department is facing a class action lawsuit alleging it failed to protect sensitive personally identifiable information in a cyber breach that exposed data belonging to millions of current and former military members for months, Reuters reported.
The lawsuit, Edwards et al v. U.S. Department of War, No. 1:26-cv-03667, was filed Monday in federal court in Washington, D.C. The two plaintiffs, a current and a former Marine, aim to represent a class of more than three million U.S. service members and are seeking damages of more than $5 million. They are represented by Jason Rathod and Nicholas Migliaccio of Migliaccio & Rathod.
According to the complaint, the breach last year at the Defense Manpower Data Center (DMDC) left Social Security numbers, dates of birth and other military personnel information exposed for months, and the Pentagon showed, in the lawsuit's words, flagrant disregard for the privacy interests of service members and other military-adjacent individuals. The intruders allegedly exploited a vulnerability in a personnel-records file-sharing system, allowing access to unencrypted personal data.
The breach was disclosed last month. Earlier reporting citing Pentagon officials put the number of people affected at more than three million, including about 2.76 million living individuals and about 294,000 deceased individuals, with unauthorized access running from October 2025 until the vulnerability was discovered and remediated on July 16, 2026. The department has said there was no indication the information had been misused, and it is offering one year of credit monitoring and identity-restoration services through IDX.
The Pentagon and lawyers for the plaintiffs did not immediately respond to requests for comment, Reuters said. In 2022, the U.S. Office of Personnel Management agreed to pay $63 million to resolve a class action lawsuit filed on behalf of millions of U.S. employees.
发布：GSM·美国（发布链接）
图片来源：五角大楼航拍（资料图）。David B. Gleason 摄，CC BY-SA 2.0，经维基共享资源。
GSM Global · 本篇英文版 English edition of this story
