Weak '123456' password at Pays ApS exposed 8.8 million Danish CPR records
A hacker claims they breached Denmark's Central Register of Persons by exploiting a Pays ApS account secured only with the password '123456'. The Danish government confirmed 8.8 million records were extracted, discovering the breach 12 days later via an unusual invoice, and Pays ApS's managing director Sophie Laursen confirmed the access point. The hacker says they do not intend to sell or leak the data.