Denmark Confirms Major Security Incident Exposing 8.8 Million Citizen Records
Denmark confirmed unauthorized CPR searches exposed names, addresses, and ID numbers of about 8.8 million people.
Denmark confirmed unauthorized access to its Central Person Register affecting about 8.8 million people, including names, addresses, and CPR numbers. The records also cover deceased people and former residents, while name-and-address confidentiality cases were excluded. Attackers abused a Danish company’s legitimate search access rather than directly compromising the registry; that access has been suspended. Irregular activity was detected on October 2 after searches in September, Datatilsynet and police were notified, and officials ordered a CPR security review.
90