Denmark Confirms 8.8 Million Citizen Records Exposed in Security Incident

Denmark has officially confirmed a significant cybersecurity incident involving unauthorized access to its Central Person Register (CPR). This breach impacts approximately 8.8 million registered individuals across the country. The exposure exceeds Denmark’s current resident population because the register includes historical data on those who have moved away or died.

The source of this confirmation is reported by GBHackers, a cybersecurity news outlet. According to their reporting, the unauthorized access compromised sensitive personal information held within the national civil registration system. This data is central to administrative processes in Denmark, serving as a unique identifier for citizens and residents.

The records exposed in this incident include names, residential addresses, and CPR numbers. The breach affects a broad spectrum of the population due to the universal nature of the CPR system. Unlike many other databases that may contain partial or outdated information, this register is continuously updated and comprehensive.

The scope of the data loss extends beyond current residents. It includes individuals who are no longer living in Denmark, which is why the number of affected records surpasses the active population count. This highlights the scale of the compromise within a national infrastructure database.

This incident underscores the critical importance of securing civil registration systems. As a core component of national identity and administrative management, any breach of such a register poses significant risks to citizen privacy and data integrity. The confirmation by Danish authorities marks a notable event in cybersecurity reporting this year.