Danish civil registry breach reportedly exposes data of about 8.8 million people
SecurityUnverifiedUpdated:
A breach of Denmark’s CPR reportedly exposed personal information on about 8.8 million people. The data includes names, addresses, and identification numbers, with records of people living abroad and deceased registrants also affected.
Records include people abroad and deceased registrants
According to the report, Denmark's Central Population Register (CPR), the national civil registry, warned that a breach exposed personal information for approximately 8.8 million registered individuals. It says attackers misused a private Danish company's legitimate registry access, while a separate data-protection authority announcement described brute-forcing to enumerate valid CPR numbers and retrieve related records.
The supplied report does not provide a comparable prior figure for the number of registry records exposed in an incident.
The CPR reportedly identified exposure affecting approximately 8.8 million registered individuals. The report says the private company's access to the registry has been blocked and a police investigation is under way.
The reported exposure concerns a national civil registry and includes people currently in Denmark, people who moved abroad, and deceased people. The stated total is close to the report's cited 11 million records held by the CPR, though it says not every record was affected.
Sources
- BleepingComputerDenmark population registry data breach affects 8.8 million peopleRead source →