Danish CPR Breach Highlights Challenge of Supply Chain Risk
Attackers abused a Danish supplier account to expose CPR data on about 8.8 million people.
Denmark's Central Person Register was accessed without authorization after someone used a private company's legitimate search rights, the Ministry of Research, Education and Digitalisation said on October 5. The September incident exposed names, addresses, and CPR numbers for about 8.8 million people, including deceased registrants, in a country of roughly six million. Experts said one supplier account can bypass controls on a centralized national database and urged real-time monitoring of third-party access. Authorities warned citizens not to disclose passwords even if callers quote their CPR details.
86