Denmark's population registry breach exposes data on 8.8 million people
The details show how one contractor's legitimate access became a nationwide exposure.
Denmark's Central Population Register (CPR) says attackers misused a private Danish company's legitimate access to the registry to pull names, addresses, CPR identification numbers and other details for about 8.8 million people, including residents, people who moved abroad and the deceased. The Danish Data Protection Agency says the attackers brute-forced valid CPR numbers and extracted each entry. The breach happened in September and was discovered on October 2; the company's access has been blocked and police are investigating.
The registry warns people not to share passwords or codes with callers, even ones who know their name, address and CPR number.
-
Personal identification number (Denmark)
After exploring Denmark population registry data breach affects 8.8 million people, to see what was exposed, read about Personal identification number (Denmark).
Denmark's CPR number is the national identification number, part of the personal information stored in the country's Civil Registration System.
Wikipedia · Wade · 5 min
0