Hackers gained access to personal information belonging to about 8.8 million people through Denmark’s Central Person Register, in a breach described by authorities as extremely serious.
The compromised information includes names, addresses and social security numbers contained in the country’s central population database.
Breach Extends Beyond Current Residents
The affected records cover Danish citizens and residents as well as people living abroad and individuals who have died. Some of the information dates back decades, giving the breach a scope that extends beyond Denmark’s current population.
Authorities have not publicly identified those responsible for the attack.
Access Through a Danish Company
According to reports, the breach occurred in September after hackers exploited the lawful access of a Danish company authorized to use information from the Central Person Register.
The incident therefore did not necessarily involve attackers directly breaking into the government database itself. Instead, access was obtained through an organization that already had legitimate permission to retrieve information from the system.
The case highlights the security risks that can emerge when sensitive government information is accessible through external organizations, extending cybersecurity considerations beyond the protection of a central database to the companies and systems connected to it.
Authorities are investigating the incident and its potential consequences for people whose information was accessed.
Sources: Bloomberg, Euronews, TechCrunch
