Denmark Central Person Register suffers massive 8.8 million record data breach

data breach Central Person Register identity theft cybersecurity Denmark

Denmark is facing an extremely serious security breach involving the Central Person Register (CPR), which contains the personal data of nearly all residents, including current citizens, expatriates, and deceased individuals. Approximately 8.8 million records were compromised, exposing names, addresses, and CPR numbers.

Investigations reveal that unauthorized actors gained access by exploiting the legitimate credentials of a private Danish company. The attackers reportedly used automated programs to test combinations of identification numbers throughout September. The breach was detected in early October, and the company's access was immediately blocked.

In response to the leak, the number of citizens who have registered a credit warning to prevent identity theft has surged. While approximately 250,000 people had such warnings on October 1, that number rose to approximately 970,000 by the evening of October 7. Authorities have urged citizens to remain vigilant against suspicious calls and emails.

Entities

Central Person Register · Danish Ministry of Research, Education and Digitalization · Datatilsynet · Denmark · Ministry of Research, Education and Digitalization

Claims

What the coverage asserts, and how many sources carry each claim.

[○ 1 SOURCE] The Danish government reported an extremely serious security breach involving the Central Person Register (CPR). b2b-cyber-security.de
[○ 1 SOURCE] The leaked data includes names, addresses, and CPR numbers. b2b-cyber-security.de
[○ 1 SOURCE] The company's access was immediately blocked after unusual activities were detected in September. b2b-cyber-security.de
[○ 1 SOURCE] The CPR administration reported the incident to the Danish Data Protection Agency, Datatilsynet. b2b-cyber-security.de
[● 2 SOURCES] Approximately 8.8 million citizen records were leaked from the Central Person Register. b2b-cyber-security.de · report24.news
[○ 1 SOURCE] Unauthorized access was gained through the legitimate access of a private Danish company. b2b-cyber-security.de
[DISPUTED] Around 250,000 people were registered with a credit warning on October 1. www.tv2kosmopol.dk · www.tv2ostjylland.dk · www.tvmidtvest.dk
[○ 1 SOURCE] Unauthorized access was gained to the names, addresses, and CPR numbers of approximately 8.8 million registered persons. www.tv2kosmopol.dk
[○ 1 SOURCE] A credit warning makes it more difficult to take out loans or credit in one's name to prevent identity theft. www.tvmidtvest.dk
[DISPUTED] Approximately 970,000 people in the CPR register had created a credit warning as of Wednesday at 18:00. www.tv2kosmopol.dk · www.tv2ostjylland.dk · www.tvmidtvest.dk