As cited
Copy frozen at (site build).
breaches incidents
`123456’ password used in massive Danish CPR data breach
At least three accounts at Danish IT company Pays, including an administrator account, used the password "123456" during a breach of Denmark's Central Person Register (CPR). The weak credentials enabled attackers to access the sensitive national registry. The incident exposed the company's inadequate password security practices.
Why it matters: Organizations handling national identity data and anyone affected by the CPR breach must audit credential policies immediately; administrators using trivial passwords create catastrophic exposure for millions of records.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
breaches incidents
`123456’ password used in massive Danish CPR data breach
At least three accounts at Danish IT company Pays, including an administrator account, used the password "123456" during a breach of Denmark's Central Person Register (CPR). The weak credentials enabled attackers to access the sensitive national registry. The incident exposed the company's inadequate password security practices.
Why it matters: Organizations handling national identity data and anyone affected by the CPR breach must audit credential policies immediately; administrators using trivial passwords create catastrophic exposure for millions of records.
- Source published
- First seen by Cybersecurity Tracker