Hackers steal 8 million citizens’ records from Danish government database
The Danish government said the breach of names, addresses, and state-issued ID numbers affects 8 million people, including people living abroad and the deceased.
A major data breach has been reported in Denmark, where hackers stole personal information of 8 million citizens from the government's Central Person Register (CPR) database.
What happened
The Danish government reported a significant data breach in which hackers accessed and stole personal information from the Central Person Register (CPR) database. The breach affected 8 million individuals, including those living abroad and the deceased. The data stolen included names, addresses, and Danish social security numbers. The breach was discovered in October, although it occurred in September. The unauthorized access was achieved by exploiting a Danish company's lawful access to the CPR system.
Why it matters
This breach highlights the vulnerabilities in national identity databases and the potential risks of third-party access. It underscores the importance of securing sensitive personal data and the need for robust cybersecurity measures to protect against such incidents.
- National identity databases are vulnerable to cyberattacks and require enhanced security measures.
- Third-party access to sensitive data can pose significant risks if not properly managed.
- Data breaches of this scale can have far-reaching consequences for individuals and governments alike.
The bigger picture
The breach has significant implications for data privacy and security, potentially leading to identity theft and other forms of fraud. It also raises concerns about the security of national identity systems and the need for improved safeguards.
The Danish government's data breach of 8 million citizens' records from the CPR database underscores the critical need for improved cybersecurity practices and the protection of sensitive personal information.
Technical details
- Central Person Register (CPR) database
- Danish social security numbers
- unauthorized access through a Danish company's lawful access
FAQ
What was the scope of the data breach?
The breach affected 8 million citizens and residents of Denmark, including people living abroad and the deceased.
What information was stolen?
The stolen data includes names, addresses, and Danish social security numbers.
How was the breach discovered?
The breach was discovered in October, although it occurred in September.
Who was responsible for the breach?
The Danish government has not identified the perpetrators, but the unauthorized access was obtained by exploiting a Danish company's lawful access to the CPR system.
What is the Central Person Register (CPR)?
The CPR is a government database containing information on Danish citizens, including their government-issued identity numbers for tax and service access.
This summary and analysis were generated with AI from the original article and may contain errors. Read the original for the full story.
Read the full story
Originally published by TechCrunch on Oct 5, 2026.
Comments
Sign in to join the discussion.