Denmark is investigating a breach of its national population register after attackers used a domestic company’s legitimate access to pull sensitive records on about 8.8 million people. Authorities said the activity occurred during September 2026 and involved large-scale automated searches of the Central Person Register (CPR) to identify valid CPR numbers, the lifelong national ID numbers used across healthcare, banking, and government services.
2026.10.06
98% relevant
This article reports the same underlying breach of Denmark’s Central Person Register and adds details that the abuse involved a private company’s legitimate access, that the register holds about 11 million records including deceased and former residents, and that police and the data protection authority are involved.
Ionut Arghire
2026.10.06
99% relevant
This article reports the same underlying event and adds source details on timing, confirming the incident was detected after abnormal activity in September and that access was abused through a Danish company with lawful CPR access.
info@thehackernews.com (The Hacker News)
2026.10.06
99% relevant
This article appears to report the same underlying event: attackers used a domestic company’s legitimate access to pull data from Denmark’s CPR system, affecting 8.8 million people, and adds source confirmation and wording about access occurring through a company account.
Bill Toulas
2026.10.05
99% relevant
This article reports the same underlying event and adds source details from CPR and Denmark’s data protection authority, including that attackers misused a private company’s legitimate access, likely brute-forced or enumerated valid CPR numbers, and that access has now been blocked while police investigate.
2026.10.05
100% relevant
This article establishes the core facts of a new national-register breach: the affected system, the access path through a domestic company, the exposed data types, and the 8.8 million-person scope.