Danish Government Confirms Major Data Breach Affecting 8 Million Citizens
The Danish government has confirmed a significant breach of its Central Person Register (CPR), resulting in the theft of personal data from around 8 million citizens and residents. This breach includes sensitive information such as names, addresses, and Danish social security numbers, affecting not only current residents but also individuals living abroad and those who are deceased.
Danish Minister Christina Egelund characterized the incident as a serious matter, emphasizing the gravity of the situation. The CPR serves as a comprehensive database of Danish citizens, containing essential information for tax purposes and access to various government services. Although Denmark's population is approximately 6 million, the CPR holds records for about 11 million individuals, with some data dating back several decades.
The breach occurred in September but was only discovered on October 2. The government has not disclosed the identity of the hackers responsible for this incident. However, it has indicated that the unauthorized access was achieved by exploiting a legitimate access point used by a Danish company to verify information within the CPR system.
Intelligence Reviewed
This incident is considered the largest data breach in Denmark's history, following a series of similar cyberattacks targeting national identity databases worldwide. Previous breaches have included significant incidents in Turkey and India, highlighting the ongoing vulnerabilities faced by government data systems globally.
As the investigation continues, the Danish government is expected to implement measures to enhance the security of its databases and prevent future breaches. The implications of this breach raise concerns about the protection of personal data and the potential risks associated with unauthorized access to sensitive information.
