Justus Knight – RR News Update! September 29th, 2026

Welcome to Justus Knight News. This isn’t a recap show; it’s an ongoing education in political psychology. The Clinical Analysis: Tracking 8+ years of U.S. & global chaos. Subscribe to learn how power actually communicates. 🔒 Extended deep-dives & reports: www.restrictedrepublic.com

DESCRIPTION

Unauthorized users had access to a Pentagon personnel system for months — and more than 3 million people may have been affected.

The breach reportedly exposed names, dates of birth, Social Security numbers and military employment information. At nearly the same time, the FBI confirmed an investigation into a claimed compromise of its employment portal, while a former Army soldier was sentenced for hacking telecom companies and exposing sensitive government-related call records.

Tonight we connect the stories — while separating what is confirmed from what remains unknown.

The real question isn’t merely who got hacked.

It’s how long someone can remain inside before America realizes the door is open.

Sources include the U.S. Department of Justice, FBI, Pentagon reporting, ABC News and Reuters.

COMMUNITY POST

They were allegedly inside a Pentagon personnel system for MONTHS. Is America’s sensitive data actually secure?

🔒 YES — isolated failure
🚨 NO — this is much bigger

References

Pentagon breach — Federal News Network

Pentagon breach — ABC News

FBI official statement on FBIJobs.gov compromise

Reuters — FBI hacked data and sensitive employee roles

Justice Department — former Army soldier sentenced

They Were Inside for Nine Months — Then America Found Out What Was Exposed

There is one number that should bother Americans more than almost anything else in this story.

Nine months.

That is approximately how long unauthorized users had access to a Defense Department personnel system before the vulnerability was discovered and patched.

And now we know the scale.

A Pentagon official says the breach of the Defense Manpower Data Center exposed information belonging to more than three million people with ties to the U.S. military.

Nearly 2.8 million living individuals were affected, along with approximately 294,000 deceased people.

The information reportedly included names, contact information, dates of birth, Social Security numbers, military job specialties and other records.

The unauthorized access stretched from October 2025 until July 2026.

Nine months.

That is where this story becomes much more disturbing than another notice telling people to change their passwords.

Because almost simultaneously, another door appears to have opened.

This one belongs to the FBI.

And then there is a third story involving a former U.S. Army soldier who admitted helping hack telecommunications companies and expose sensitive government-related communications records.

None of these incidents has been publicly established as connected.

They do not need to be.

Taken together, they reveal something arguably more important:

America may have built an enormous digital fortress with more doors than anyone can realistically watch at once.

The Pentagon Breach

The Defense Manpower Data Center is not an ordinary corporate database.

It supports an enormous population connected to the American defense establishment.

According to reporting published September 28, a small number of unauthorized users accessed a DMDC information system containing unencrypted personally identifiable information.

The Pentagon says the access occurred between October 2025 and July 2026. A vulnerability in a file-sharing system was discovered on July 16 and immediately patched.

The exposed information reportedly included Social Security numbers and military job specialties in addition to basic identifying information.

The Pentagon has reportedly said it currently has no evidence that the exposed information has been misused.

That is important.

But it does not erase the question created by the timeline:

What can someone learn during nine months of unauthorized access?

Most people naturally think about data breaches in terms of identity theft.

Credit reports.

Fraudulent accounts.

Stolen Social Security numbers.

Those risks are serious.

But military personnel information potentially creates a different category of concern.

Imagine combining a person’s identity with his occupation, organization, contact information and employment history.

Suddenly the database doesn’t merely describe an individual.

It can begin describing a network.

Who works where?

Who performs sensitive functions?

Who might know whom?

Who could be convincingly impersonated?

Who could receive a highly targeted phishing message that appears to come from a colleague?

For criminals, information is money.

For intelligence services, information can become something much more valuable.

It becomes a map.

Then the FBI Announced Its Own Investigation

On September 23, the FBI publicly acknowledged that a cybercriminal group was claiming it had compromised FBIJobs.gov and affected personally identifiable information belonging to FBI employees.

The FBI said investigators were still trying to determine whether the point of compromise was within an FBI system or involved one of the third-party providers supporting the employment portal.

That single distinction exposes one of the defining cybersecurity problems of the modern world.

Organizations no longer protect one building containing one computer network.

They depend upon ecosystems.

Cloud providers.

Recruiting systems.

Software vendors.

Outside databases.

Contractors.

Authentication services.

File-sharing platforms.

Third-party applications.

Every connection delivers capability.

Every connection potentially creates another door.

Reuters subsequently examined samples of allegedly stolen FBI information and reported that some records contained sensitive details concerning employees’ intelligence assignments.

The material included information associated with counterintelligence, surveillance and human-intelligence work.

Reuters was able to verify portions of the information but could not authenticate the entire dataset, while the FBI continued investigating the scope of the compromise.

Days later, Reuters reported that the same hacking group claimed to possess additional highly sensitive FBI personnel information, including medical and psychiatric records. Again, parts of the material were reviewed by Reuters, while the complete scope of the hackers’ claims remained unverified.

Think about the nature of that information.

Not someone’s favorite restaurant.

Not an email newsletter subscription.

Potentially their assignments.

Their employment history.

Their health information.

Their personal identifiers.

Their family connections.

Individually, many pieces of information seem mundane.

Combined, they become powerful.

Then Comes the Soldier

On September 25, the Justice Department announced another remarkable cybersecurity case.

Cameron John Wagenius, a 22-year-old former Army soldier, was sentenced to 70 months in federal prison and ordered to pay $294,978 in restitution.

According to federal prosecutors, Wagenius participated in a conspiracy that hacked telecommunications company databases, accessed sensitive information and attempted to extort the companies by threatening to release stolen data.

Prosecutors say Wagenius and his co-conspirators attempted to extort at least $1 million from victims.

But one detail stands above the others.

In November 2024, prosecutors say Wagenius published stolen confidential non-content call-detail records belonging to a government official, along with records involving relatives of another former official.

He was serving in the Army during portions of the criminal activity.

Call-detail records don’t necessarily reveal what someone said.

They can reveal something else.

Who contacted whom.

When they communicated.

How frequently.

For how long.

Patterns.

Relationships.

Networks.

The skeleton of a person’s communications life.

And suddenly another comforting assumption disappears.

The threat is not always somebody sitting halfway around the world attempting to break through the front gate.

Sometimes the person capable of understanding or exploiting the system may already have legitimate proximity to it.

The Invisible Theft

Physical security is relatively easy for the human brain to understand.

A tank disappears.

You notice.

A vault is empty.

You notice.

Someone breaks a window.

You notice.

Cyber theft can operate under completely different rules.

The original information doesn’t have to disappear.

Someone can potentially copy it.

The database stays exactly where it was.

The server keeps running.

Employees come to work the next morning.

Nothing appears missing.

That creates one of the strangest dynamics in modern security:

Someone can steal something from you while leaving the original sitting exactly where you put it.

And if your monitoring systems fail to detect the copying, querying or unauthorized access, you might not immediately know anything happened.

That is why the Pentagon’s nine-month timeline deserves so much attention.

The most frightening attacker is not necessarily the one who announces himself.

It can be the one who remains quiet.

Observes.

Maps the system.

Understands its structure.

Copies what matters.

And disappears.

The Problem With “Just Another Data Breach”

Americans have almost become numb to the phrase.

Another company got hacked.

Another hospital lost records.

Another retailer sends customers free credit monitoring.

Another password gets changed.

Another breach disappears from the headlines.

That normalization is dangerous when the records involve national security institutions.

Military personnel information is different.

FBI personnel information is different.

Telecommunications records involving government officials are different.

Because data has a cumulative property.

One breached database tells you someone’s name.

Another tells you where he works.

Another tells you his phone number.

Another reveals relatives.

Another reveals job responsibilities.

Another contains medical information.

Another reveals communications patterns.

Another contains financial information.

Each dataset may look incomplete.

But sophisticated intelligence gathering has always worked by assembling fragments.

The puzzle matters more than any individual piece.

No Grand Conspiracy Is Required

There is a temptation when several major incidents appear together to immediately assume they must all be connected.

There is currently no public evidence establishing that the Pentagon breach, the FBI compromise and the Wagenius case are part of one coordinated operation.

And that may actually make the larger story more concerning.

Because the structural vulnerability doesn’t require a grand conspiracy.

It requires one outdated server.

One unpatched vulnerability.

One compromised credential.

One careless employee.

One vendor connection.

One improperly configured database.

One contractor.

One file-sharing platform.

One attacker patient enough to keep looking.

Modern organizations have spent decades becoming interconnected because interconnected systems are faster, cheaper and more productive.

But interconnected systems create an unavoidable tradeoff.

Every new connection can also create another potential path inward.

The Question America Should Be Asking

The most important question may not be:

Who hacked the Pentagon?

The government has not publicly provided enough information to conclusively answer that.

It isn’t:

Are all these incidents connected?

There is no evidence establishing that.

The better question is simpler:

How many unauthorized users are already inside systems that nobody has realized are compromised yet?

That is the question created by nine months of access.

Not because nine months proves some catastrophic intelligence operation occurred.

It doesn’t.

But because it demonstrates the gap that can exist between intrusion and discovery.

Cybersecurity professionals sometimes call that period dwell time — the interval during which an intruder remains inside an environment before detection.

And every additional day potentially matters.

Because the digital battlefield operates differently from the physical one.

There may be no explosion.

No siren.

No smoke.

No dramatic television footage.

A computer screen can look perfectly normal while something extraordinarily valuable is leaving through the back door.

Nine Months

More than three million people makes the Pentagon breach enormous.

Social Security numbers make it personal.

Military job information makes it sensitive.

The FBI compromise makes the broader cybersecurity environment harder to dismiss.

The Wagenius prosecution demonstrates how valuable telecommunications and government-related information can become in criminal hands.

But the number I keep returning to is still:

Nine months.

Nine months between the reported beginning of unauthorized access and the vulnerability being discovered.

Maybe investigators ultimately determine that relatively little damage occurred.

Maybe the Pentagon is correct that the exposed information has not been misused.

Everyone should hope so.

But hope isn’t a cybersecurity strategy.

Because somewhere right now there is another forgotten account.

Another unpatched server.

Another third-party connection.

Another compromised password.

Another system nobody has checked recently enough.

And somewhere else there may be someone testing the door.

The frightening question isn’t whether they will knock.

It is whether, when they do,

they discover it was already open.

Categories: Politics

Tags: #breakingnews, #cyberattack, #CyberSecurity, #DataBreach, #fbi, #Hackers, #justusknight, #military, #nationalsecurity, #pentagon