'123456' password linked to Denmark data breach affecting 8.8M people
A "123456" password on a vendor account exposed Denmark's register data on 8.8 million people.
Denmark confirmed that legal access held by a Danish company to the Central Register of Persons was abused, exposing information on 8.8 million people. A person claiming responsibility told Politiken they used an IT-company account protected by the password "123456"; the paper reported at least three accounts, including an administrator account, used that password. Pays ApS managing director Sophie Laursen confirmed the company's access was exploited. Documents obtained by TV 2 say access began September 10 and about 14 million automated searches ran through September 20, with detection on October 2. Datatilsynet was notified October 4. The claimant said they did not intend to sell or leak the data.