Denmark Cpr Breach

Weak password '123456' linked to breach of 8.8 million Danish CPR records

A hacker told Danish outlet Politiken that they accessed Denmark's Central Register of Persons by breaching accounts at Pays ApS, a private firm with authorized CPR access, several of which used the password '123456.' The breach exposed names, addresses and ID numbers of 8.8 million living and deceased Danes, and records show the attacker ran roughly 14 million automated searches over about ten days in September before a staffer at another government ministry flagged unusual billing activity.

techspot.com · 2026-10-14

Breach of Denmark's CPR database exposes records of 8 million people

Denmark's government confirmed that hackers stole most of the contents of its Central Person Register, a database holding identity data on roughly 11 million people including the deceased and those living abroad. Minister Christina Egelund called it a "serious incident," saying attackers gained access by abusing a private Danish company's legitimate credentials to query the system. The breach occurred in September but wasn't discovered until October 2, and authorities have not named a suspect.

techcrunch.com · 2026-10-05