Massive Data Breach Exposes Personal Information of 8.8 Million Danes
Denmark’s CPR register a national database containing personal identification numbers has suffered a major breach, exposing sensitive data belonging to approximately 8.8 million individuals, including both living and deceased residents. The unauthorized access, confirmed by the Digitalization Ministry on Monday, compromised names, addresses, birth dates, and CPR numbers, which serve as Denmark’s unique personal identifiers.
Cybersecurity experts warn that the stolen data could fuel more sophisticated phishing attacks. Jens Myrup Pedersen, a professor at Aarhus University, noted that such detailed personal information allows criminals to craft highly convincing fraudulent emails or messages, impersonating authorities to extract further sensitive data. While the breach alone may not enable direct financial fraud such as taking out loans in victims’ names Pedersen cautioned that the data could be combined with other publicly available information or sold on illicit markets, amplifying identity theft risks.
The incident stands out for its scale and apparent intent, unlike a 2015 mishap where records were accidentally shared with a visa company. Pedersen described the current breach as "unusually extensive," raising concerns about deliberate cybercriminal activity targeting Denmark’s critical personal data infrastructure. Authorities have not yet disclosed the method of access or potential suspects.
Department of Digitalization, Copenhagen Business School cybersecurity rating report: https://www.rankiteo.com/company/department-of-digitalization
"id": "DEP1791218516",
"linkid": "department-of-digitalization",
"type": "Breach",
"date": "10/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '8.8 million individuals (living '
'and deceased residents)',
'industry': 'Public Sector',
'location': 'Denmark',
'name': 'Denmark’s CPR register',
'type': 'Government Database'}],
'data_breach': {'number_of_records_exposed': '8.8 million',
'personally_identifiable_information': 'Names, addresses, '
'birth dates, CPR '
'numbers',
'sensitivity_of_data': 'High (CPR numbers, names, addresses, '
'birth dates)',
'type_of_data_compromised': 'Personal identification data'},
'description': 'Denmark’s CPR register, a national database containing '
'personal identification numbers, has suffered a major breach, '
'exposing sensitive data belonging to approximately 8.8 '
'million individuals, including both living and deceased '
'residents. The unauthorized access compromised names, '
'addresses, birth dates, and CPR numbers, which serve as '
'Denmark’s unique personal identifiers. Cybersecurity experts '
'warn that the stolen data could fuel more sophisticated '
'phishing attacks.',
'impact': {'brand_reputation_impact': 'Amplified identity theft risks, '
'potential for sophisticated phishing '
'attacks',
'data_compromised': 'Names, addresses, birth dates, CPR numbers',
'identity_theft_risk': 'High',
'systems_affected': 'Denmark’s CPR register (national personal '
'identification database)'},
'initial_access_broker': {'data_sold_on_dark_web': 'Potential (not '
'confirmed)'},
'investigation_status': 'Ongoing',
'motivation': 'Cybercriminal activity',
'references': [{'source': 'Digitalization Ministry of Denmark'}],
'title': 'Massive Data Breach Exposes Personal Information of 8.8 Million '
'Danes',
'type': 'Data Breach'}