United States Department of Defense

Profile narrative

The United States Department of Defense (DoD), also known as DoD, The Pentagon, is the executive department responsible for coordinating and supervising all agencies and functions of the government related to national security and the United States Armed Forces. It oversees the Army, Navy, Marine Corps, Air Force, and Space Force, and manages defense policy, planning, and resource allocation. The department is headquartered at the Pentagon in Arlington, Virginia, United States of America. It also runs a bug bounty program that invites external security researchers to identify vulnerabilities in its networks.

The DoD has experienced multiple cyber incidents that illustrate the scope of its digital attack surface. In 2019, a security researcher participating in its bug bounty program discovered a cryptocurrency‑mining botnet operating on a misconfigured Jenkins server within its network. In 2018, a breach of a third‑party contractor exposed payment card information and personal details of approximately 30,000 DoD personnel. In 2017, Russian state‑linked actors used Twitter messages with malicious links to compromise DoD personnel’s devices and accounts. In 2015, ISIS‑affiliated hackers leaked personal information of U.S. and French military personnel, and separate intrusions targeted Pentagon food‑court systems and the Joint Staff unclassified email network. Also in 2015, Russian attackers exploited an unpatched legacy vulnerability to gain access to an unclassified DoD network before being expelled after detection.

These incidents demonstrate the department’s reliance on both internal defenses and external collaboration to address sophisticated threats. The bug bounty program, while intended to improve security, has also revealed weaknesses such as exposed servers that allowed unauthorized resource hijacking for cryptocurrency mining. The contractor breach highlighted risks associated with supply‑chain dependencies and the need for rigorous vendor security oversight. Social‑media phishing and state‑linked intrusions underscore the persistent threat posed by foreign adversaries seeking to gather intelligence or disrupt communications. The ISIS‑linked data leak and food‑court compromises show that even non‑state actors and opportunistic criminals can exploit DoD‑connected systems. Repeated targeting of unclassified email systems by Russian actors indicates a continued focus on harvesting operational information despite the absence of classified data exposure.

Structurally, the DoD is an executive department of the United States federal government, reporting to the President through the Secretary of Defense and subject to congressional oversight. Its organization includes the Office of the Secretary of Defense, the Joint Chiefs of Staff, the military departments (Army, Navy, Air Force, Marine Corps, Space Force), and numerous defense agencies such as the Defense Intelligence Agency and the National Security Agency. The department also maintains field activities and combatant commands that oversee operations in specific geographic or functional areas worldwide. This integrated structure enables the DoD to align policy, intelligence, logistics, and operational command in support of its mission to protect the nation.

Incidents

7 incidents linked to this organisation.