Denmark’s CPR breach: 14 million lookups in ten days, found through a bill
Unknown users have pulled names, addresses and ID numbers on about 8.8 million people from Denmark’s Central Person Register (CPR). They abused a small Danish company’s legal access to the register. Denmark’s digitalisation ministry announced the breach on Monday. The CPR administration has cut off the company, and the police are investigating.
Denmark has about 6 million residents, according to Statistics Denmark. The register holds about 11 million records, because it also keeps people who have died or moved abroad. The breach did not reach people who chose name and address protection, the ministry said.
“This is a deeply serious incident,” said Christina Egelund, the minister for science, higher education and digital affairs.
Found through an invoice
The lookups ran for ten days in September. The company’s account made well over 14 million CPR lookup attempts, and 8.8 million returned a record, officials told a press briefing on Tuesday, ...
Copyright of this story solely belongs to thenextweb.com. To see the full text click HERE