Danish authorities announce cyberattack / Data of 8.8 million people accessed

Denmark’s central database, which includes information about people residing in or registered in the country, was targeted in a cyberattack. Unauthorized individuals gained access to the data of approximately 8.8 million people, Danish authorities responsible for digital affairs announced.

The information accessed included names, addresses, and CPR numbers, the equivalent of social security numbers. The data belongs both to people living in Denmark and to those who have died or left the country.

Access was obtained through a legitimate connection held by a Danish company. The authorities have since revoked this access and opened an investigation to identify those responsible and determine the full extent of the incident.

The administration of the national CPR register was informed on Friday of an anomaly that occurred during September. Over the weekend, the authorities established the approximate number of people affected. Minister Christina Egelund described the situation as an “extremely serious” incident.

The national register contains the data of approximately 11 million people, while Denmark’s population is around six million. The authorities announced additional measures to prevent similar incidents. People benefiting from address and name protection were not affected.