CYBERSECURITYTRACKER
Permanent story citation

Denmark's ID register spills more people's details than the country has residents

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9526

As cited

Copy frozen at (site build).

regulatory

Denmark's ID register spills more people's details than the country has residents

An unauthorized party exploited a private Danish company's legitimate access to Denmark's Central Population Register, compromising personal data on approximately 8.8 million individuals including names, addresses, and identification numbers. The CPR administration detected irregular activity in September and disclosed the breach on October 2. The exposed database contains roughly 11 million records, exceeding Denmark's population because it includes deceased persons and those who have relocated.

Why it matters: Danish residents and businesses relying on CPR numbers for banking, healthcare, and public services face identity fraud risk; practitioners should monitor for credential-based attacks and advise clients that CPR numbers alone are insufficient identity proof.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

regulatory

Denmark's ID register spills more people's details than the country has residents

An unauthorized party exploited a private Danish company's legitimate access to Denmark's Central Population Register, compromising personal data on approximately 8.8 million individuals including names, addresses, and identification numbers. The CPR administration detected irregular activity in September and disclosed the breach on October 2. The exposed database contains roughly 11 million records, exceeding Denmark's population because it includes deceased persons and those who have relocated.

Why it matters: Danish residents and businesses relying on CPR numbers for banking, healthcare, and public services face identity fraud risk; practitioners should monitor for credential-based attacks and advise clients that CPR numbers alone are insufficient identity proof.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

regulatory

Denmark's ID register spills more people's details than the country has residents

An unauthorized party exploited a private Danish company's legitimate access to Denmark's Central Population Register, compromising personal data on approximately 8.8 million individuals including names, addresses, and identification numbers. The CPR administration detected irregular activity in September and disclosed the breach on October 2. The exposed database contains roughly 11 million records, exceeding Denmark's population because it includes deceased persons and those who have relocated.

Why it matters: Danish residents and businesses relying on CPR numbers for banking, healthcare, and public services face identity fraud risk; practitioners should monitor for credential-based attacks and advise clients that CPR numbers alone are insufficient identity proof.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary