GoKawiilDenmark's CPR registry breach exposes data on 8.8 million people
Denmark's Central Population Register said attackers exploited a private company's legitimate system access to brute-force valid CPR numbers and extract names, addresses and identification data, affecting roughly 8.8 million of the registry's 11 million entries, including residents, émigrés and deceased individuals. The breach occurred in September 2026 but was discovered October 2, with the company's access now blocked and police investigating.
GoKawiil's interpretation of the reporting above, not reported fact.
The scale of the breach—covering 80% of a national population registry—raises concerns about downstream identity theft and phishing risks for millions of Danes, since CPR numbers are widely used to authenticate access to government and financial services. Minister Christina Egelund's decision to brief Parliament suggests officials view this as a serious systemic failure rather than an isolated incident, and the reliance on third-party access as the attack vector may prompt scrutiny of how private companies are vetted for registry access.
- 8.8 million people's data was exposed via brute-forced CPR numbers.
- Attackers abused a private company's legitimate access to the registry system.
- Danish authorities have blocked the access, launched a police probe, and set up a cyber hotline for affected citizens.
YubiKey 5 NFC Security Key — With millions of personal records exposed in breaches like this, securing your own online accounts with hardware-based two-factor authentication is more important than ever. The YubiKey 5 NFC adds a strong physical layer of protection beyond just passwords, making it far harder for attackers to misuse stolen identity data to access your accounts.”,
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-05
Published there as: “Denmark population registry data breach affects 8.8 million people”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.