GoKawiilDenmark's CPR registry breach exposes data on 8.8 million people
Denmark's Central Population Register said attackers exploited a private company's legitimate system access to brute-force valid CPR numbers and extract names, addresses and identification data, affecting roughly 8.8 million of the registry's 11 million entries, including residents, émigrés and deceased individuals. The breach occurred in September 2026 but was discovered October 2, with the company's access now blocked and police investigating.