Hackers breached the security of a defense industry news website and stole sensitive subscriber information that could be used in attacks targeting the US military and its contractors.

Gannet Co., publisher of DefenseNews, disclosed the bad news in an advisory published Monday. Data exposed included subscribers’ first and last names, usernames, passwords, email addresses, and in many cases military duty status, paygrade, and branch of service.