CPR

Denmark's Central Person Register (CPR), the national register holding personal data on nearly all residents, has been hit by a cyberattack that exposed information on 8.8 million people. Reports indicate attackers gained access through a company account, and an investigation is expected to examine how the breach occurred and what data was taken.

Denmark's Central Population Register (CPR) has suffered a major data breach affecting roughly 8.8 million people, about 80% of the register's 11 million records. Attackers exploited a private company's legitimate access to the registry and brute-forced valid CPR numbers, extracting names, addresses and personal ID numbers. It is one of the largest data exposures in Danish history.

A major data breach in Denmark has reportedly exposed 8.8 million records from the CPR, the country's central personal registration system that holds data on nearly all residents. If confirmed, the incident would rank among the largest breaches of government-held personal data in Danish history, raising questions about identity theft risks and the security of state registries. Authorities have not yet detailed how the exposure occurred or who is responsible.

Danish authorities are investigating a major data breach in which 8.8 million CPR records — the personal ID numbers used across Denmark's public and private services — were exposed. The incident potentially affects a large share of the population, raising concerns over identity theft and the security of state-held personal data.