The Danish Ministry of Higher Education and Science (UFM) has confirmed a massive data breach involving the unauthorized access of civil registration (CPR) data belonging to approximately 8.8 million registered individuals.
The compromised information includes the names, addresses, and highly sensitive CPR numbers of living, deceased, and emigrated citizens stored within the national registry.
According to official reports, the unauthorized access was achieved when malicious actors successfully exploited and misused the legitimate access privileges of a private Danish company connected to the CPR system.
This unprecedented incident exposes the severe risks associated with third-party supply chains and highlights how vulnerable centralized government databases can be when external corporate partners fail to properly secure their access points.
Authorities have immediately initiated a comprehensive security review and a full technical investigation to determine the exact circumstances of the breach, while reinforcing system restrictions to prevent similar unauthorized queries in the future.
Read ufm.dk article for more information.
