Pays ApS (Organization): news timeline & CVEs

'123456' password linked to Denmark data breach affecting 8.8M people

A "123456" password on a vendor account exposed Denmark's register data on 8.8 million people.

Denmark confirmed that legal access held by a Danish company to the Central Register of Persons was abused, exposing information on 8.8 million people. A person claiming responsibility told Politiken they used an IT-company account protected by the password "123456"; the paper reported at least three accounts, including an administrator account, used that password. Pays ApS managing director Sophie Laursen confirmed the company's access was exploited. Documents obtained by TV 2 say access began September 10 and about 14 million automated searches ran through September 20, with detection on October 2. Datatilsynet was notified October 4. The claimant said they did not intend to sell or leak the data.

The Register · SecurityOct 13, 11:14 UTC · 3d agoData breach in the wild 6 sources1· 1 read

Denmark Data Breach Involving 8.8 Million Records Linked to ‘123456’ Password

A weak password at Danish firm Pays ApS exposed about 8.8 million CPR records, including ID numbers and addresses.

Politiken reported that Pays ApS, a small IT company in Odense, had its authorized access to Denmark's Central Person Register abused after accounts, including an administrator, used the password 123456. An alleged attacker provided 8,749,975 records covering about 5.5 million living people and 3.3 million deceased people, including CPR numbers and addresses. The attacker said a former employee's leaked password enabled access starting September 10 for roughly three weeks, while authorities separately described about ten days of access. Pays confirmed the abuse; MitID was not reported compromised, and no fraudulent use of the records is confirmed.

GBHackersupdated Oct 13, 11:14 UTC · 3d agofirst Oct 13, 05:12 UTC · 4d agoData breach in the wild 6 sources1

How “123456” became the key to almost 9 million personal records

Attackers used the password 123456 to query Denmark’s CPR register, exposing records on about 8.8 million people.

Attackers abused Pays ApS’s authorized access to Denmark’s civil population register using a former employee’s leaked password, 123456, which had appeared in an earlier data leak. Over 21 days they ran about 14 million searches, obtaining names, addresses, and CPR numbers for roughly 5.5 million living and 3.3 million deceased people. Suspicious querying stopped on September 20 and access was shut down on October 2 after an unusually large bill drew attention.

Malwarebytes Labsupdated Oct 13, 11:14 UTC · 3d agofirst Oct 12, 12:34 UTC · 4d agoData breach in the wild 6 sources4· 1 read

Admin Password “123456” Led to 8.8 Million Danish CPR Data Breach

Password "123456" at Danish firm Pays exposed about 8.8 million national CPR identity records.

A weak administrator password, reportedly "123456", is linked to unauthorized collection of Danish Central Person Register data through Funen IT firm Pays, which had lawful search access. Politiken reported 8,749,975 records—about 5.5 million living people and 3.3 million deceased—including CPR numbers and addresses. Pays confirmed the misuse. Access allegedly began on 10 September and lasted 21 days and 17 hours, with the attacker said to have used two programs to retrieve and store the data. The hacker told Politiken the records would not be sold or published, and fraud use is not confirmed.

Cyber Security Newsupdated Oct 13, 11:14 UTC · 3d agofirst Oct 12, 04:42 UTC · 5d agoData breach in the wild 6 sources2· 1 read

`123456' password used in Danish CPR data breach

Danish CPR breach exposing 8.8 million records involved accounts at Pays using password '123456', including an administrator account.

Politiken reports at least three accounts at Pays ApS, including the administrator account, used the password '123456' when hackers accessed Denmark's CPR civil registration register covering about 8.8 million CPR numbers. The hacker had access for 21 days starting September 10, initially using a leaked password from a former employee, and built two programs to extract and store the data externally. Pays confirmed its legal CPR access was abused; the hacker claims no plans to sell or publish the data.

Hacker News · securityupdated Oct 13, 11:14 UTC · 3d agofirst Oct 10, 09:51 UTC · 6d agoData breach in the wild 6 sources HN 30↑ · 6 comments

Pays ApS

Timeline5 articles

Appears with

'123456' password linked to Denmark data breach affecting 8.8M people

Denmark Data Breach Involving 8.8 Million Records Linked to ‘123456’ Password

How “123456” became the key to almost 9 million personal records

Admin Password “123456” Led to 8.8 Million Danish CPR Data Breach

`123456' password used in Danish CPR data breach