Danish Government Faces Historic Data Breach Affecting Millions

Major Data Breach Unveiled in Denmark

The Danish government has confirmed a substantial data breach involving its Central Person Register (CPR), in which hackers accessed and stole records of approximately 8 million individuals. This alarming event, classified as a "serious incident" by Danish Minister Christina Egelund, affects not only living citizens but also deceased individuals and those residing abroad.

Details of the Breach

The breach occurred in September but was only identified on October 2, prompting swift responses from government officials. The hackers gained unauthorized access through the misuse of a Danish company's lawful ability to explore the CPR system. This breach is considered one of the largest in Denmark's history, with implications that could impact a large portion of its population, which currently stands at around 6 million people, yet the database includes records for roughly 11 million, including historical data spanning decades.

According to Minister Egelund, the stolen information includes essential personal details such as names, addresses, Danish social security numbers, among other sensitive data. The CPR database is a vital governmental resource used for various purposes, including taxation and service access.

Investigations and Responses

In light of this event, the Danish government has refrained from disclosing the specific entity behind the breach while it investigates the incident further. They emphasized that the access point was through a specific Danish company that has been legally permitted to verify citizen information. This incident underscores the vulnerabilities within systems that handle national identity and citizen records, echoing previous breaches globally, such as the 2016 attack affecting Turkish citizens and incidents involving India’s Aadhaar database.

The ramifications of this breach could be extensive, leading to potential identity theft and other forms of fraud leaving millions at risk. As cybersecurity threats continue to evolve, it raises a significant concern regarding the security measures in place to protect sensitive government databases.