Danish personal ID data breach affects 8.8 million records

A Danish personal ID data breach has allowed unauthorised actors to access names, addresses and civil registration numbers belonging to about 8.8 million registered people, in what a cybersecurity expert has described as the largest breach ever involving Denmark’s central population register. The Danish Ministry of Science, Higher Education and Digital Affairs said on Monday that the unauthorised access took place through a private Danish company that was legally allowed to search the Central Person Register (CPR). The figure does not mean that 8.8 million people currently living in Denmark have been affected. The CPR system contains records for around 11 million people, including current residents, people who have left Denmark and people who have died. According to Science, Higher Education and Digital Affairs Minister Christina Egelund, the unauthorised access continued for around ten days in September. Irregular activity was detected by the CPR administration on Friday, October 2, and the scale of the incident became clearer over the weekend. The company’s access has since been blocked. The incident has been reported to the Danish Data Protection Agency (Datatilsynet), while the National Special Crime Unit is conducting a high-priority criminal investigation. Authorities have not disclosed the company involved, who was … The post Danish personal ID data breach affects 8.8 million records appeared first on NordiskPost.