Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
Attackers used a Danish company account to access CPR data for about 8.8 million people.
Denmark's digitalization ministry said unauthorized parties accessed names, addresses, and personal identification numbers for about 8.8 million people in the Central Person Register. The lookups ran for about 10 days in September 2026 through a small Danish company's lawful access and were noticed on October 2. The ministry stopped that access, notified Datatilsynet, and police are investigating. How the company's systems were compromised, whether the data was retained, and who is responsible remain unknown.
90