INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Hackers Exploit Danish Company's Access to Central Person Register

| 2026-10-06 09:48 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A cyber attack was spotted on Friday night, with hackers accessing the Central Person Register (CPR) by taking advantage of a Danish company's access to the system. The data accessed includes names, addresses, CPR numbers – akin to national insurance numbers that also link to healthcare and other services – and other data on 8.8 million people registered on the system in Denmark. While authorities are still investigating, it is unclear who was behind the attack; however, officials suggest the threat actor(s) took advantage of a system that allows Danish companies to legitimately search for information within the CPR system. The breach has affected approximately 11 million people, including those who have moved away from Denmark as well as those who have passed away, and has exposed personal data belonging to 8.8 million citizens.
Technical Mitigations AI-generated
• Monitor third-party access to the Central Person Register (CPR) system continuously to detect unusual search patterns. • Limit external partners' ability to view data within the CPR system and strictly control what information is shared with them. • Implement protections against phishing emails, texts, and calls claiming to come from banks or public authorities.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
NORTH_AMERICA NORTH_AMERICA NORDICS NORDICS healthhealth
Incident Timeline
‎5 October
Hackers accessed the Central Person Register by exploiting a vulnerability in a Danish company's access to the system.
target_region Denmark
Hackers accessed the Central Person Register (CPR) by taking advantage of a Danish company's access to the system, the government admitted in a statement on 5 October.
organisation the Central Person Register
Hackers accessed the Central Person Register (CPR) by taking advantage of a Danish company's access to the system, the government admitted in a statement on 5 October.
‎2026/10/06
Threat actors used a phishing email campaign to target users signing up for the 2026 Future Focus report, which was sent on October 6, 2026.
general_metric 2026 Future Focus
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
‎2026/10/06
Hackers exploited a system allowing Danish companies to search the CPR database, gaining access to 8.8 million citizens' names, addresses, and CPR numbers.
organisation Google News
" FOLLOW US ON SOCIAL MEDIA Follow ITPro on Google News and add us as a preferred source to keep tabs on all our latest news, analysis, views, and reviews.
organisation CyberSmart
Jamie Akhtar, CEO and co-founder of CyberSmart, agreed that Danes should be on the alert for phishing emails, texts and calls that claim to come from banks or public authorities.
organisation CPR
The attack was spotted on Friday night, with CPR staff observing irregular behavior on systems during September.
organisation Nathan Davies-Webb
Nathan Davies-Webb, principal consultant at Acumen Cyber, said this discovery gap is a highly concerning aspect of the breach.
organisation Huntress
Dray Agha, senior manager of security operations at Huntress, said the incident shows the risk of developing a centralized national database that offers direct access to third parties.
organisation Danes
In light of the breach, Egelund warned Danes to "be aware now and in the future," with a government statement warning citizens against giving out passwords or other confidential information over the phone or email to an unknown person, even if they have personal details like your address or CPR number.
organisation BlueSky
You can also follow ITPro on LinkedIn , X , Facebook , and BlueSky .
Intelligence Sources
IT Pro 2026-10-06