World News
Denmark investigates registry breach exposing personal records of 8.8 million people
Unauthorized parties misused a local company's access to obtain identification numbers and addresses from the national database
The short version
- Det Centrale Personregister suffered a security breach after unauthorized actors abused a Danish firm's legitimate credentials to access records of approximately 8.8 million people.[Hacker News]
- The exposed records include names, addresses, and personal identification numbers, though individuals with registered address protection were not compromised.[Hacker News]
- The total figure exceeds Denmark's living population because the database includes deceased citizens and emigrated individuals.[Deutsche Welle]
- Authorities cut off the compromised access point, notified the Data Protection Agency, and opened a police investigation to determine the full extent of the incident.[Deutsche Welle · Hacker News]
Key facts
- Det Centrale Personregister (CPR) confirmed an unauthorized intrusion that accessed records belonging to approximately 8.8 million registered people.[Deutsche Welle · Hacker News]
- The breach occurred through the misuse of legitimate access credentials held by a Danish company.[Deutsche Welle · Hacker News]
- The compromised records contained names, addresses, and national personal identification numbers, but excluded individuals registered with name and address protection.[Hacker News]
- Authorities clarified that the 8.8 million count exceeds Denmark's living population because the database retains information on people who have died or emigrated.[Deutsche Welle]
- The ministry was initially alerted to a system anomaly in September, subsequently severed the company's access, and reported the incident to the Data Protection Agency.[Deutsche Welle · Hacker News]
What remains uncertain
- The identities of the perpetrators and the full extent of how the compromised data was handled remain undetermined as investigations continue.[Deutsche Welle]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.