🔴 8.8 million Danes were exposed due to the password "123456"

Danish media have reported a data breach involving 8.8 million citizens. The cause lies in poorly protected accounts at a small IT company, through which a criminal hacker gained access to Denmark's Central Register of Natural Persons (CPR). The hacker who claimed responsibility for the attack claims to have used the password "123456," which was set for at least three company accounts, including the administrator account.

On October 5, the CPR administration confirmed the data leak involving 8.8 million people, specifying that the illegitimate access occurred through legitimate access to the registry system by one of the Danish companies. The name of the company, Pays ApS, based on the island of Fyn, has not been officially disclosed, but on October 9, its management confirmed that the access had been compromised.