Denmark data breach uncovers 8.8 million identities
Denmark experienced a significant data breach, resulting in unauthorised access to names, addresses, and personal identification numbers of approximately 8.8 million individuals recorded in the nation’s central population database. The breach transpired when unidentified individuals exploited a private Danish company’s legitimate access to the Central Person Register, referred to as CPR, according to a statement released by the government on Monday. The company has been barred from the system as law enforcement conducts an investigation into the incident, with officials indicating that it is premature to ascertain the identity of those responsible for the breach.
“This is a deeply serious incident,” stated Digitalisation Minister Christina Egelund. She has commissioned a thorough security assessment of the CPR system and has encouraged Danes to remain alert regarding any suspicious calls and emails. The CPR system serves as a fundamental element of Denmark’s extensively digitised public sector. Each resident is allocated a distinct 10-digit CPR number, which serves as a crucial identifier for individuals in interactions with government entities, financial institutions, and healthcare providers.
Denmark’s population stands at approximately 6 million; however, the register encompasses records for around 11 million individuals, which includes those who have passed away or relocated overseas. The administration initially identified irregular activity on October 2 and concluded over the weekend that unauthorised searches had occurred during September. The report indicated that individuals registered in the system for name and address protection were not exposed.
