# AAFES Investigates Suspicious Cybersecurity Messages

The Army and Air Force Exchange Service (AAFES) is actively investigating suspicious emails and push notifications sent to military customers through its official app and email channels, which may indicate a cybersecurity breach or compromise involving AAFES or a third-party partner. Customers have been advised to avoid interacting with these messages, including clicking links or providing personal or payment information. This incident underscores the critical need for enhanced cybersecurity measures within military retail operations to protect sensitive customer data and maintain trust.

- Procurement professionals should prioritize cybersecurity requirements and vendor assessments for contracts related to military retail IT systems and customer engagement platforms.
- This situation highlights the importance of integrating robust threat detection and incident response capabilities in future AAFES technology procurements.
- Contractors providing cybersecurity services or secure app development may find increased demand as AAFES and DoD seek to mitigate risks and strengthen defenses.
- Organizations supporting military retail operations should evaluate their security posture and compliance with DoD cybersecurity standards to address emerging threats.

**Jurisdictions:** federal
**Industries:** Defense & Military
**Topics:** Cybersecurity
**Published:** September 18, 2026

### Government Entities
- Army and Air Force Exchange Service (AAFES)
- Department of Defense (DoD)
- United States Army (Army)
- United States Air Force (Air Force)

### Key Quotes
> If shoppers receive an unexpected or suspicious email or push notification from the My Exchange app, please do not click any links, open attachments or provide personal, account or payment information in response.
> — Julie Mitchell, Vice President for Marketing Customer Engagement, AAFES

> All of this sort of points to there’s a breach somewhere or someone got in, either through AAFES itself or a third-party partner. I can’t say for sure, but this is certainly eyebrow-raising and concerning.
> — Ally Armeson, Executive Director, FightCybercrime.org

### Sources
- [AAFES investigating ‘suspicious' messages sent to military customers through email and store’s official app | DefenseScoop](https://defensescoop.com/2026/09/18/aafes-investigating-suspicious-messages-sent-to-military-customers) - DefenseScoop