Denmark reviews CPR system security after breach of 8.8 million records

Denmark has not decided if breach victims need new CPR numbers. Digitalization Minister Christina Egelund announced a full security review of the CPR system. The review follows unauthorized access to 8.8 million personal records. She spoke after briefing two Danish parliamentary committees about the data leak.

Egelund said review findings will show needed changes to restore security. Authorities have not set a deadline for finishing this security review. Unauthorized users misused a private Danish company's legal access to obtain records. Stolen data includes names, addresses, and CPR numbers of residents. The affected records cover living people, deceased people, and former residents.

CPR files contain details on marital status and family relationships. They also list citizenship, birth details, and church membership. Authorities now focus on preventing identity theft and digital fraud. They created a website and telephone hotline to guide residents. Denmark's data protection agency Datatilsynet received a formal breach report.

The police special crime unit NSK is currently investigating the breach. Authorities have not identified who carried out the breach yet. Minister Egelund said investigators have not ruled out foreign actors.