{
  "id": 14432427,
  "title": "'123456' password was all a hacker reportedly needed to expose over 8 million people's personal data",
  "url": "https://urgent.news/2026/10/14/123456-password-was-all-a-hacker-reportedly-needed-to-expose-over-8",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-14T10:56:42.000Z",
  "source": {
    "name": "PC Gamer",
    "slug": "pc-gamer",
    "url": "https://www.pcgamer.com/software/security/123456-password-was-all-a-hacker-reportedly-needed-to-expose-over-8-million-peoples-personal-data/"
  },
  "original_language": "en",
  "account": "Denmark's Central Register of Persons (CPR) suffered a security breach in September, exposing personal information of 8.8 million individuals. Although the attacker claimed no intention of leaking or selling the stolen data, the incident highlights the vulnerability of using weak passwords. The private Danish firm Pays ApS, which had access to CPR for various services, was the target of the breach. The attacker gained entry through an administrator account with the password '123456', one of three accounts held by the firm with the same password. Once inside, the attacker conducted 14 million automated searches of the CPR between September 10 and September 20. The breach was discovered on October 2 when an employee noticed an unusually high invoice, indicating numerous searches beyond the norm. This incident serves as a reminder for everyone to strengthen their password management practices and avoid using simple passwords like '123456'.",
  "summary": "A department where just a little bit of creativity doesn't go amiss.",
  "key_points": [
    "Denmark's Central Register of Persons (CPR) experienced a security breach in September.",
    "Hacker exploited weak password 123456 to gain access to 8.8 million personal data.",
    "Breach revealed on October 2 after 14 million automated searches by attacker."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}