CYBERSECURITYTRACKER
Permanent story citation

`123456’ password used in massive Danish CPR data breach

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9963

As cited

Copy frozen at (site build).

breaches incidents

`123456’ password used in massive Danish CPR data breach

At least three accounts at Danish IT company Pays, including an administrator account, used the password "123456" during a breach of Denmark's Central Person Register (CPR). The weak credentials enabled attackers to access the sensitive national registry. The incident exposed the company's inadequate password security practices.

Why it matters: Organizations handling national identity data and anyone affected by the CPR breach must audit credential policies immediately; administrators using trivial passwords create catastrophic exposure for millions of records.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

`123456’ password used in massive Danish CPR data breach

At least three accounts at Danish IT company Pays, including an administrator account, used the password "123456" during a breach of Denmark's Central Person Register (CPR). The weak credentials enabled attackers to access the sensitive national registry. The incident exposed the company's inadequate password security practices.

Why it matters: Organizations handling national identity data and anyone affected by the CPR breach must audit credential policies immediately; administrators using trivial passwords create catastrophic exposure for millions of records.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary