Denmark CPR Breach: Legitimate Company Access Abused to Query Data on About 8.8 Million People
1. Basic Information Article Name : Omfattende uautoriseret adgang til borgeres CPR-oplysninger Source : Danish Ministry of Science, Higher Education and Digital Affairs Publication Date : 2026-10-05 Update Date : Unknown (not stated in primary source) Reason for Report Revision : Technical review: Clarified the 8.8 million registrant scope, name and address protection exceptions, reported…
Denmark experiences major breach in personal data security, as a legitimate corporation's access to CPR numbers is exploited to query and obtain sensitive information on nearly 8.8 million individuals. This includes living people, emigrants, and deceased persons. Although names and addresses are excluded from the exposed data, the breach raises significant concerns about misuse of personal information for impersonation and fraud.
The attack was carried out through unauthorized automated queries, and the unauthorized access was revoked. However, the manner in which the breach was executed and the extent of potential fraud remains unknown.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
