[CLSTR]
< Back to all clusters
[TECHNOLOGY] · Denmark · 7 sources

started · updated

Part of situation: Denmark CPR data breach and new security mandates (6 clusters)

Denmark data breach exposes 8.8 million citizens' records

Denmark data breach CPR registry hack Pays ApS cybersecurity failure weak password

A massive data breach in Denmark has exposed the personal information of approximately 8.8 million people. The breach targeted the Central Person Register (CPR), the nation's critical database for identification, banking, and healthcare.

Investigations revealed that the attacker did not use sophisticated methods, but instead gained access through an account belonging to the IT services company Pays ApS. The account was reportedly protected by the extremely weak password ‘123456’. The attacker allegedly used an account associated with a former employee to conduct roughly 14 million automated queries over a 10-day period in September 2026.

The compromised data includes full names, addresses, birth dates, citizenship, and marital status. While the CPR database itself was not directly hacked, the misuse of authorized access by a third-party partner allowed for the large-scale extraction of records. The perpetrator claimed to the newspaper Politiken that they had no intention of selling or leaking the stolen information.

Entities

Central Person Register · Denmark · Denmark Central Person Register · Denmark National Population Register · Pays ApS · Politiken

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

Hackean el Registro Civil de Dinamarca usaban la insólita… [uruguayaldia.com.uy]
Un hacker ha violato il registro dell'anagrafe nazionale della Danimarca: la password era "123456" [www.justnerd.it]
"123456" parolasıyla 8,8 milyon kişinin bilgileri ele geçirildi [www.chip.com.tr]
Bu Şifreyi Kullananlar Yandı: 9 Milyon Kişinin Verisi Sızdırıldı [shiftdelete.net]
Danimarca, 8,8 milioni di dati esposti in un database statale: la colpa è di una password 123456 [tech.everyeye.it]
Hacker erbeutet sensible Daten von 8,8 Millionen Menschen [www.blick.ch]
Dinamarca ya no puede fiarse de su número de identidad. ¿El motivo? La contraseña más usada y peor que hay: "123456" [www.xataka.com]