Security

Unauthorized access exposes data in Denmark’s population register

Reports say unauthorized parties accessed personal information in Denmark’s Central Person Register, affecting about 8.8 million people. One account says access used a private company’s lawful right to look up records.

Image: The Hacker News

Why it matters

The exposure of names, addresses and personal identification numbers for about 8.8 million people, living and dead, makes this a large-scale privacy breach of Denmark’s population register. Access through a private company’s lawful lookup rights also raises concerns about how authorized access to sensitive public records is protected.

What we know

Confirmed by several sources

  • Unauthorized parties accessed personal information associated with Denmark’s Central Person Register, affecting approximately 8.8 million people. — The Hacker News, BleepingComputer

Reported by one source

  • The accessed data included names, addresses, and personal identification numbers of living and deceased people. — The Hacker News
  • Access was obtained through a private Danish company’s lawful right to look up records. — The Hacker News

Coverage 2 publishers

  1. BleepingComputer

    Denmark population registry data breach affects 8.8 million people

  2. The Hacker News

    Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

Articles stay on their publishers’ sites; each link opens the original.