This isn't what most people think of when they hear data breach. There was a breach of DoD security standards when data was transferred to an inappropriate environment but no evidence that the data has been leaked beyond that transfer.

I think it's laudable that the Army National Guard would do a breach notification when there's only the possibility of malicious data loss.