Denmark national registry breach exposes data of 8.8 million people

cyberattack data breach Denmark CPR registry personal data

Denmark is investigating a major cyberattack on its national population registry (CPR), which has compromised the personal data of approximately 8.8 million people. The breach, which occurred during September, involved unauthorized access to names, addresses, and CPR numbers (social security numbers).

Authorities confirmed that the attackers did not breach the registry directly. Instead, they misused the legitimate access rights of a Danish company authorized to query the system. The company’s access has since been revoked. The compromised data includes records for current residents, individuals who have emigrated, and deceased persons, bringing the total number of affected records to nearly 9 million out of the 11 million in the registry.

Digital Affairs Minister Christina Egelund described the incident as “extremely serious.” While the breach is extensive, officials noted that individuals with registered name and address protection were not affected. The police and Datatilsynet are currently investigating the incident to determine the full extent of the breach and identify those responsible.

Entities

CPR Administration · Central Person Register · Central Personregister · Christina Egelund · Danish Ministry for Digital Affairs · Danish Ministry of Digital Affairs · Danish Ministry of Higher Education and Science · Datatilsynet · Denmark · Ministry of Research, Higher Education and Digitalization

Claims

What the coverage asserts, and how many sources carry each claim.

[● 7 SOURCES] The compromised data includes information on living, emigrated, and deceased individuals. n1info.si · www.dr.dk · nordsoeposten.dk · ing.dk · mobilsiden.dk · +2 more
[● 3 SOURCES] The breach occurred in September. n1info.si · nordsoeposten.dk · sapo.pt
[● 7 SOURCES] The breach of the Danish national register is an extremely serious incident. n1info.si · www.tv2kosmopol.dk · via.ritzau.dk · gwg.ng · fr.euronews.com · +2 more
[● 7 SOURCES] Individuals with name and address protection were not affected by the breach. nordsoeposten.dk · mobilsiden.dk · via.ritzau.dk · sapo.pt · journalducoin.com · +2 more
[● 17 SOURCES] Unauthorized access was gained to the personal data of approximately 8.8 million people. n1info.si · www.dr.dk · www.tv2kosmopol.dk · nordsoeposten.dk · ing.dk · +12 more
[● 3 SOURCES] The police and Datatilsynet are investigating the incident. nordsoeposten.dk · via.ritzau.dk · mobilsiden.dk
[● 17 SOURCES] The compromised data includes names, addresses, and CPR numbers. n1info.si · www.dr.dk · www.tv2kosmopol.dk · nordsoeposten.dk · ing.dk · +12 more
[● 12 SOURCES] Hackers gained access by misusing the legitimate access of a Danish company. n1info.si · www.dr.dk · nordsoeposten.dk · ing.dk · mobilsiden.dk · +7 more
[● 16 SOURCES] The data includes records of current residents, people who have moved abroad, and deceased individuals. n1info.si · www.dr.dk · gwg.ng · nordsoeposten.dk · journalducoin.com · +11 more
[● 9 SOURCES] Hackers accessed the registry by misusing the legal access of a Danish company. n1info.si · www.dr.dk · gwg.ng · nordsoeposten.dk · journalducoin.com · +4 more
[● 10 SOURCES] Hackers gained unauthorized access to the Danish national registry (CPR). n1info.si · www.dr.dk · www.tv2kosmopol.dk · gwg.ng · nordsoeposten.dk · +5 more
[● 2 SOURCES] The police and relevant authorities are investigating the incident. nordsoeposten.dk · via.ritzau.dk