Danish data breach compromises personal details of 8.8 million citizens

Danish authorities have launched an investigation into a major data breach affecting millions of citizens. The breach occurred when unidentified individuals misused a private Danish company's authorized access to the Central Person Register, commonly known as CPR, which maintains comprehensive personal records on Danish residents.

The CPR database is a foundational government resource that stores critical identification and demographic information on the population. While private companies and organizations are granted legitimate access to portions of this register for lawful purposes, the recent incident demonstrates how such access privileges can be exploited when security protocols are circumvented.

The scale of the breach—affecting 8.8 million people in a country of approximately 5.8 million—suggests the compromised data may include information on Danish citizens, residents, and possibly individuals with historical ties to the country. Personal details exposed in such breaches typically include names, identification numbers, addresses, and other biographical information.

The incident has prompted Danish officials to review access controls and oversight mechanisms governing third-party interactions with sensitive population registers. Authorities are examining how the unauthorized access occurred and what measures can prevent similar incidents in the future, particularly as governments across the region grapple with protecting citizen data from increasingly sophisticated cyber threats.