The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long breach.