'123456' password linked to Denmark data breach affecting 8.8M people
Local media reports three weakly protected accounts at small IT biz whose access to national register was abused
An attacker gained unauthorized access to Denmark's Central Register of Persons (CPR) using the password 123456, according to a person claiming responsibility for the breach. Politiken, a Danish news outlet, reported that the breach, which occurred between September 10 and September 20, affected 8.8 million individuals, although the register contains approximately 11 million records.
The attacker was allegedly part of a company named Pays ApS, which had authorized access to the CPR system for services like validating business customers' records. The company's website was taken offline, and they have not commented on the password claims. Denmark's government confirmed the breach on October 5, attributing it to a legal access granted to the company.
The intrusion went undetected for 12 days, and the Danish data protection authority was notified on October 4.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
