4 mentions in 7 days · 4 in 30 days · 4 total · first seen · last
Attackers exposed names, addresses, and ID numbers of 8.8 million people in Denmark's national register.
On October 5, 2026, Danish authorities disclosed a breach of the Central Person Register, Denmark's national population database. Attackers used a legitimate company account to access names, addresses, and CPR numbers of about 8.8 million people. Rescana published a summary of the public disclosure.
Hackers stole names, addresses, and national ID numbers of about 8.8 million people from Denmark's Central Person Register.
Denmark's Central Person Register is notifying about 8.8 million people that names, addresses, and CPR numbers were stolen. Hackers used a Danish company's lawful access to the national civil register, which holds records on about 11 million people; abnormal September activity was confirmed over the weekend. Individuals who opted into name and address protection were not affected. CPR cut off the company's access, notified the Danish Data Protection Agency, and opened a police investigation; the actor was not named.
Attackers used a Danish company account to access CPR data for about 8.8 million people.
Denmark's digitalization ministry said unauthorized parties accessed names, addresses, and personal identification numbers for about 8.8 million people in the Central Person Register. The lookups ran for about 10 days in September 2026 through a small Danish company's lawful access and were noticed on October 2. The ministry stopped that access, notified Datatilsynet, and police are investigating. How the company's systems were compromised, whether the data was retained, and who is responsible remain unknown.
Unauthorized access to Denmark’s population register exposed names, addresses, and ID numbers for about 8.8 million people.
Denmark is investigating unauthorized access to its Central Person Register that exposed names, addresses, and CPR numbers for about 8.8 million people. The perpetrators used an unnamed domestic company’s legitimate access; officials detected irregular activity on Friday and said the breach occurred during September. The Data Protection Agency, notified Sunday, described a very large number of automated searches aimed at identifying valid CPR numbers, which are lifelong identifiers used for healthcare, banking, and government services. Research and digitalisation minister Christina Egelund ordered a broad security review and extended the national digital-security hotline.