INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Pentagon Leaked Internet Surveillance Archive Exposes Global Network Monitoring
| 2025-07-10 08:09 DATA BREACH
Executive Summary
AI-generated
On July 10, 2025, a massive data breach was discovered involving the Department of Defense's CENTCOM and PACOM unified combatant commands. The leak exposed billions of public internet posts and news commentary scraped from individuals across multiple countries, including the United States, over an 8-year period. Approximately 1.8 billion posts were captured, originating from various sources such as Facebook, featuring multiple languages and coming from around the world. The data was stored in unsecured Amazon Web Services S3 cloud storage buckets that allowed any AWS global authenticated user to browse and download content. As a result of this breach, immediate action was taken by the Defense Department to secure the open buckets and prevent further access; however, concerns remain about the extent and legality of known Pentagon surveillance against US citizens due to the large number of apparently benign public internet posts collected from within the US.
Technical Mitigations AI-generated
• Block or hunt for AWS global authenticated users with free sign-up capabilities.
• Patch VendorX software to prevent unauthorized access and data exposure.
• Detect loose correlations of scraped data to regional US security concerns using techniques such as keyword analysis.
Technical Observables Login Required
Indicators of Compromise (IoCs) Protected
Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.
co•••••.the
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Intelligence Sources
Upguard
2025-07-10