Hackers Breach Denmark’s Population Registry, Expose Data Of 8.8m

Hackers have gained unauthorised access to Denmark’s national population registry, exposing the personal information of about 8.8 million people, the country’s Ministry of Digital Affairs has disclosed.

The breach affected names, addresses and CPR numbers contained in the Central Person Register (CPR), Denmark’s national database for social security information.

According to a statement issued by the ministry on Monday, the registry administration discovered that unauthorised individuals had accessed the information.

“The administration of the national registry (CPR) has found that unauthorised individuals obtained illegal access, in particular to the names, addresses and CPR numbers of around 8.8 million registered people,” the ministry said.

The affected records include information belonging to people who have died or emigrated from Denmark.

Digital Affairs Minister Christina Egelund described the incident as a major security breach, saying authorities were working to determine the full extent of the compromise.

“This is an extremely serious incident,” Egelund was quoted as saying in the statement.

“Together with all the relevant authorities, we are in the process of mapping out the full extent of the incident,” she added.

Although Denmark has a population of about six million, its national registry contains information on about 11 million people, including deceased people and those who have left the country.

The government said an investigation had commenced to determine the circumstances surrounding the breach and identify those responsible.

The hackers reportedly gained access through a Danish company that is legally authorised to access the national registry.

Authorities said the company’s access to the registry had not yet been revoked.

The identities of the hackers remain unknown as investigations into the incident continue.

—AFP