Hackers steal 8 million citizens’ records from Danish government database

Your Danish social security number is now exposed in one of the country's largest data breaches.

Hackers successfully breached Denmark's Central Person Register (CPR), a central government database, and stole records of approximately 8 million citizens and residents. The stolen data includes names, addresses, Danish social security numbers, and other sensitive information. The breach, which occurred in September and was discovered on October 2, allowed unauthorized access by exploiting a Danish company's legitimate access to search the CPR system. This incident is considered the largest data breach in Denmark's history and impacts current residents, individuals living abroad, and even the deceased. The Danish government has not identified the perpetrators but acknowledged the seriousness of the event.

The scale of the breach, affecting 8 million individuals from a population of around 6 million, highlights the persistent vulnerability of national identity databases to cyberattacks. This incident follows similar large-scale breaches in Turkey and India, underscoring a growing trend of governments struggling to secure critical citizen data. The method of exploiting a trusted third-party company's access raises concerns about supply chain security and the potential for similar attacks to be launched elsewhere if vendor access controls are not rigorously audited.

The exposure of Danish social security numbers and other personal data in such a widespread breach could lead to an increase in identity theft and fraud targeting Danish citizens for years to come. It also puts pressure on the Danish government and potentially other nations to re-evaluate and strengthen their data protection regulations and cybersecurity infrastructure. The incident may prompt stricter controls on third-party access to sensitive government databases and a push for enhanced encryption and data anonymization techniques.