Denmark Data Breach Exposes 8.8M People's Personal Data
Major Security Breach in Denmark's Central Person Register (CPR)
Published: 05-10-2026 | Category: News / CPR
A severe security incident has been identified by the Central Person Register (CPR), involving extensive unauthorized access to the personal information of Danish citizens.
Incident Overview
The breach occurred when an external Danish entity, which possessed legitimate authorization to query the CPR-systemet, had its access privileges abused. This allowed unauthorized parties to extract sensitive personal identifiers.
"The CPR administration has halted the company's access and is currently working with specialists and authorities to map the sequence of events."
Data Impact Analysis
The following information was compromised during the event:
- Full Names
- Residential Addresses
- CPR Numbers (Civil Registration Numbers)
- Other associated personal details
Notably, the breach included everyone did not affect individuals who have officially registered for name and address protection (navne- og adressebeskyttelse).
Technical & Statistical Summary
The scale of the exposure can be represented as:
| Detail | Status/Value |
|---|---|
| System Compromised | Central Person Register (CPR) |
| Vector of Attack | Abuse of legal corporate access |
| Data Scope | Million People |
| Protection Status | Protected addresses remained secure |
Breach Workflow
Response and Remediation
The CPR administration has initiated a multi-agency response to contain the damage and investigate the source of the abuse.
Current Action Items:
- Terminate the offending company's system access.
- File a formal report with the Datatilsynet (Data Protection Agency).
- Complete the forensic mapping of the incident.
- Finalize the police investigation.
System Log Simulation
The unauthorized queries likely appeared in the system logs similar to this:
{
"event": "data_query",
"access_token": "CORP_LEGAL_ACCESS_01",
"status": "unauthorized_abuse",
"records_accessed": 8800000,
"timestamp": "2026-10-05T00:00:00Z"
}
For further official details regarding this security event, please visit the website of the Ministry of Higher Education and Science: Official Press Release