A massive cybersecurity incident involving Denmark's central civil registration system has exposed the personal records of approximately 8.8 million people, according to reporting by Accredited Wire Reports citing Plataforma Media.
The compromised database, known as the CPR register, forms the foundational infrastructure for personal identification and public administration across the country. The scale of the exposure indicates that the breach encompasses vast amounts of citizen data, exceeding the nation's current living population and likely including historical or deceased individuals' records.
Basic Credential Vulnerability
According to an individual claiming responsibility for the breach, the administrative protections safeguarding the sensitive repository were remarkably elementary. The hacker stated that access was gained because the system's password was simply set to "123456".
Such credentials represent one of the most widely recognized and easily penetrated combinations in digital security. The reported use of the sequence underscores an extraordinary lapse in basic authentication safeguards for an asset critical to state functions and personal privacy.
Scope of the Compromised Data
The Danish CPR registry tracks essential personal identifying numbers, civil statuses, addresses, and related vital statistics required to interact with government agencies, financial institutions, and healthcare providers. While technical teams assess the perimeter of the incident, the exposure of 8.8 million records creates severe risks of identity theft and systemic fraud.
Authorities have not yet published a full technical audit confirming every vector of the breach, but the disclosure highlights significant vulnerabilities within legacy public sector databases, according to the initial dispatches.
