Hackers breached Denmark’s Central Person Register (CPR), exposing personal data belonging to approximately 8.8 million registered individuals. The leaked records include sensitive details such as names, physical addresses, and unique 10-digit social security numbers. Attackers bypassed direct government defenses by infiltrating a private Danish company that held legitimate, authorized access to the registry. Despite Denmark having a population of around 6 million, the compromised database also included records of deceased and emigrated individuals. Digitalization authorities have revoked the compromised vendor access, launched formal police investigations, and urged citizens to be vigilant against potential fraud.

Full report : Hackers accessed Denmark’s central population registry by compromising a private company’s legal portal access.