GoKawiilWeak password '123456' linked to breach of 8.8 million Danish CPR records
A hacker told Danish outlet Politiken that they accessed Denmark's Central Register of Persons by breaching accounts at Pays ApS, a private firm with authorized CPR access, several of which used the password '123456.' The breach exposed names, addresses and ID numbers of 8.8 million living and deceased Danes, and records show the attacker ran roughly 14 million automated searches over about ten days in September before a staffer at another government ministry flagged unusual billing activity.