Danish Digitalization Ministry

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

Unauthorized actors exploited a private company's legitimate access to Denmark's Central Person Register (CPR) to obtain sensitive personal data—including names, addresses, and CPR numbers—for 8.8 million people, exposing systemic vulnerabilities in third-party data access governance.