CPR

Denmark's Central Person Register (CPR), the national register holding personal data on nearly all residents, has been hit by a cyberattack that exposed information on 8.8 million people. Reports indicate attackers gained access through a company account, and an investigation is expected to examine how the breach occurred and what data was taken.

Danish authorities say attackers accessed the CPR national registry, exposing personal data on roughly 8.8 million people. Officials report the intruders gained entry using a private company's account, making it one of the largest data breaches in Denmark's history. Nearly the entire population could be affected, and the incident is drawing scrutiny over how third-party access to sensitive government registers is secured.

Attackers gained access to Denmark's CPR national population register, exposing names, addresses and personal ID numbers of roughly 8.8 million people, both living and deceased. The breach was carried out by abusing the lawful record-lookup access of a private Danish company. The Danish Ministry disclosed the incident on October 5, and the scale of exposure has drawn widespread concern about safeguarding state data accessed through third parties.