`123456' password used in Danish CPR data breach
Danish CPR breach exposing 8.8 million records involved accounts at Pays using password '123456', including an administrator account.
Politiken reports at least three accounts at Pays ApS, including the administrator account, used the password '123456' when hackers accessed Denmark's CPR civil registration register covering about 8.8 million CPR numbers. The hacker had access for 21 days starting September 10, initially using a leaked password from a former employee, and built two programs to extract and store the data externally. Pays confirmed its legal CPR access was abused; the hacker claims no plans to sell or publish the data.
88