Danish Hackers Access 8.8M Records via CPR Register Breach

Attackers accessed the names, addresses, and personal identification numbers of approximately 8.8 million people in Denmark’s Central Person Register (CPR) through a private company’s account. The breach lasted about 10 days in September, with automated lookups identifying valid CPR numbers. The Danish digitalization ministry has urged residents to avoid sharing confidential information and has initiated measures to prevent future incidents. The data protection authority, Datatilsynet, is investigating the breach, while the police are also involved in the probe.