Danish CPR Register Data Breach Exposes 8.8 Million Records

Danish authorities discovered a massive data breach involving 8.8 million personal CPR records. The breach could increase digital fraud risks for all local residents in Denmark. An unusually large invoice alerted officials to the breach on Tuesday. A small Danish company had legal search access to the national CPR register. Each search carries a fee. Extensive activity produced a huge bill.

Mikkel Leihardt is a department head at the Ministry of Research, Education and Digitalization. He said the large invoice made officials aware of the unusual activity. Unauthorized users abused the company's access for about 10 days in September. Authorities have not named the company. The accessed data mostly included names and addresses.

Officials do not yet know who caused the breach. They also do not know how the access was compromised. Henriette Erbs represents Denmark's National Special Crime Unit, known as NSK. She stated that such cases often involve cross-border crime. She added that it is too early to identify the responsible method.

Laila Reenberg leads Denmark's Agency for Public Security. She noted that digital fraud is an obvious possible motive. However, authorities do not know who collected the data. They do not know how anyone intends to use it. The story was reported by CPH Post.