Danish CPR Numbers No Longer Valid as Sole Identity Verification
CPR numbers in Denmark can no longer be used alone for identity verification after unauthorized parties accessed 8.8 million personal records.
2026年10月8日
/ DANGDI / DANGDI / DANGDI /Danish CPR numbers can no longer serve as sole identification for citizens.
Authorities made this announcement on Tuesday.
Unauthorized parties recently accessed personal data of 8.8 million people.
The breach affected living and deceased residents in the register.
The data leak happened over ten days in September.
A small Danish company had official CPR database access.
Unauthorized users made millions of searches through this firm.
Authorities discovered the breach after sending a large invoice for searches.
The leaked data includes names and addresses.
Other sensitive records were not accessed.
CPR numbers were often used at pharmacies and medical clinics.
Organizations must now verify identities using stronger methods.
The Agency for Public Security recommends alternative security tools.
Residents should use MitID or two-factor authentication.
One-time security codes via text or email are also recommended.
The Ministry of Research, Education and Digitalization launched a security review.
New safety measures now cover critical state IT systems.
Source: The Copenhagen Post
