Stories
Weak Password Exposes 8.8 Million Records in Denmark Data Breach
F
Firstpost•15-10-2026, 15:14
Weak Password Exposes 8.8 Million Records in Denmark Data Breach
- •A cybersecurity breach involving Denmark’s Central Register of Persons allegedly exposed 8.8 million personal records through a third-party service provider.
- •The individual claiming responsibility stated that the password 123456 was used to gain unauthorized access to the database via Pays ApS.
- •Compromised data reportedly included names, addresses, and national identification numbers belonging to both living and deceased individuals.
- •The breach was discovered after unusually high database usage triggered a large and unexpected invoice, prompting an internal investigation.
- •Experts emphasize the urgent need for strong passwords, multi-factor authentication, and strict security monitoring for third-party vendors.
Key Questions Answered
Approximately 8.8 million personal records belonging to both living and deceased individuals were allegedly accessed in the cybersecurity breach involving Denmark's Central Register of Persons.
An individual allegedly gained access to the database using the weak password "123456" through an account linked to the Danish IT and data services company Pays ApS, which had authorized access to the CPR database.
The incident came to light after unusually high database usage resulted in an unexpectedly large invoice, which prompted the company to investigate the activity.
