INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Denmark's Company Account Compromised, Accessing CPR Data for 88 Million

| 2026-10-06 06:00 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
Unauthorized parties gained access to the names, addresses, and personal identification numbers of about 8.8 million people in Denmark's national population register via a private Danish company's lawful right to look up records in the Central Person Register (CPR) between September 6 and October 5, 2026. The attackers used automated lookups to identify valid personal identification numbers, known as CPR numbers, which were then allegedly retrieved by the unauthorized parties. The access was stopped after an employee of the register's administration noticed unusual activity on Friday, October 2. Denmark's data protection authority is investigating and has reported the case to Datatilsynet.
Technical Mitigations AI-generated
• Block or hunt for automated lookups with a large number of valid personal identification numbers (CPR numbers) made in the Central Person Register (CPR). • Set up a credit warning on borger.dk to prevent companies from extending loans or credit in your name. • Use two-factor authentication and never share MitID details, one-time codes, passwords, or card details with anyone.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
NORDICS NORDICS governmentgovernment
Incident Timeline
‎the start of 2025
Attackers accessed CPR data for approximately 8.8 million people via a company account linked to Statistics Denmark at the start of 2025.
target_region Denmark
Denmark's population was just under 6 million at the start of 2025, according to Statistics Denmark .
attribution Statistics Denmark
Denmark's population was just under 6 million at the start of 2025, according to Statistics Denmark .
general_metric 6 population
Denmark's population was just under 6 million at the start of 2025, according to Statistics Denmark .
‎Friday, October 2
An employee of the register's administration noticed unusual activity on a company account used to access CPR data for 8.8 million people on Friday, October 2.
‎October 5
Unauthorized parties accessed the names, addresses, and personal identification numbers of about 8.8 million people in Denmark's national population register via a company account.
general_metric 8.8 People
Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark's national population register, the country's digitalization ministry said on October 5 .
source_region Denmark
Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark's national population register, the country's digitalization ministry said on October 5 .
organisation CPR
A very large number of automated lookups were made in the register to identify valid personal identification numbers, known as CPR numbers, Datatilsynet said in a notice on October 5.
‎2026/10/06
Threat actors accessed CPR data for approximately 8.8 million people in Denmark via a private Danish company's lawful right to look up records in the Central Person Register (CPR).
organisation Datatilsynet
The register's administration has stopped the company's access and reported the case to Datatilsynet, Denmark's data protection authority.
organisation the Central Person Register
They used a private Danish company's lawful right to look up records in the Central Person Register (CPR).
organisation The Hacker News's
By The Hacker News's arithmetic, that format allows at most 10,000 possible numbers for each date of birth.
data_breach 10,000 possible numbers
By The Hacker News's arithmetic, that format allows at most 10,000 possible numbers for each date of birth.
Tactical Metrics
Metrics
data_breach
10,000
Possible Numbers
By The Hacker News's arithmetic, that format allows at most 10,000 possible numbers for each date of birth.
Intelligence Sources
The Hacker News 2026-10-06