cpr.dkadvisoryDenmark Data Breach Exposes 8.8M People's Personal Data
Denmark's CPR administration (Det Centrale Personregister) disclosed that unauthorized actors abused a Danish company's legitimate, authorized access to the CPR system to extract names, addresses and CPR (national ID) numbers for roughly 8.8 million registered citizens. Records of individuals with name/address protection were not exposed. CPR has revoked the company's access, notified the Danish Data Protection Agency (Datatilsynet), and the incident is being investigated by police alongside relevant authorities.
TL;DR Abuse of a third party's legitimate access to Denmark's national CPR registry exposed personal data on 8.8 million citizens.
Organisations named here
- Datatilsynet
- Det Centrale Personregister
Technologies named here
- CPR
Techniques named here
- Abuse of legitimate third-party access
Threat actors named here
- Unidentified unauthorized party
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup