How Fraudsters Exploited Military Records

In October 2026, the Department of Justice (DOJ) revealed that criminals used photos of veterans’ military records to access VA benefits accounts. These records, which often include DD Form 214 and other sensitive documents, can be used to answer security questions or impersonate veterans during the VA claims process. The breach highlights a critical vulnerability in the security of online VA systems.

Fraudsters typically obtained these photos through unsecured emails, social media, or by tricking veterans into sharing them. Once in possession of these images, they could reset account passwords or file fraudulent claims, putting both personal data and earned benefits at risk.

Steps Veterans Should Take Immediately

If you have shared photos of your DD-214, VA award letters, or other military records online or via email, take action now. First, log in to your VA.gov account and check for any unauthorized changes to your profile, direct deposit information, or claim status. If you notice anything suspicious, contact the VA Identity Theft Helpline at 1-855-578-5492.

Next, update your account passwords and enable two-factor authentication (2FA) through VA.gov or My HealtheVet. Avoid sending photos of official documents through unsecured channels. Instead, use the secure upload feature on VA.gov or submit documents by mail when possible.

Best Practices for Document Security

  • Never share photos of your DD-214 or VA award letters on social media or in public forums.
  • When submitting documents to the VA, use the official claims portal or mail them to the address listed on VA Form 21-526EZ instructions.
  • Shred physical copies of sensitive documents you no longer need.
  • Monitor your credit report for unusual activity. The VA recommends using annualcreditreport.com for free checks.
  • Sign up for VA's Direct Deposit Monitoring to get alerts about changes to your payment information.

What to Do If You Suspect Fraud

If you believe your VA account or benefits have been compromised, act fast. File a report with the VA Inspector General at 1-800-488-8244 or online. You should also notify your local VA Regional Office and request a freeze on your account if necessary.

Consider placing a fraud alert or credit freeze with the major credit bureaus. For step-by-step guidance, see our explainers on identity theft and VA account security. If you need to re-establish your credentials, you may be asked to provide additional proof of identity, such as a notarized VA Form 21-4138 statement.

Legislative and Policy Changes on the Horizon

This incident has prompted calls for stronger security protocols in the VA claims process. Lawmakers are urging the VA to enhance identity verification, possibly requiring in-person or video authentication for certain transactions. Veterans should stay informed about these changes by checking the VA claims hub for updates.

Until new safeguards are in place, vigilance is key. Protect your documents, use secure submission methods, and regularly review your benefit accounts. If you have questions about your disability rating or claim status, use our VA Disability Rating Calculator or contact a VA-accredited representative.