Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
Summary: Denmark's digitalization ministry said on October 5 that unauthorized parties accessed the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in the Central Person Register (CPR) by using a private Danish company's lawful lookup rights. The access lasted about 10 days in September, was noticed by a register administration employee on Friday, October 2, and the company's access has been stopped, with the case reported to Datatilsynet and police investigating.
Why it matters: One company's legitimate lookup account reached roughly 4 in 5 of the register's 11 million records, and the official statements do not explain how that access came to cover that many people or whether the data was retained or used.
Read the original at The Hacker News ↗
- Topics
- Privacy
- Related
- Italy Fines Meta €805 Million Over Facebook's Android Gallery Access Without Explicit Consent Cyber Risks · Nov 15, 2026