Home / Oct 07, 2026 / Story
0
#4 SecurityWeek general October 06, 2026 at 09:38 UTC

8.8 Million Impacted by Data Breach at Denmark’s Central Person Register

By Ionut Arghire

AI Summary

Denmark's Central Person Register (CPR) was breached via a private company's lawful API access, exposing names, addresses, and national ID numbers for all 8.8 million registered citizens — living and dead. The attack vector of abusing legitimate third-party data access rights rather than exploiting a technical flaw makes this particularly difficult to prevent through conventional controls.

Relevance score: 89.0/100

# More from October 07