Hackers Steal 8.8 Million Danish Records Using Simple 123456 Password
In one of the most egregious security failures this year, a hacker reportedly compromised the personal records of roughly 8.8 million Danish people, covering virtually the entire population of the country both living and deceased, by using the ever-popular "123456" password.
The breach targeted Denmark's Central Register of Persons (CPR) which stores PII including full names, addresses, and individual identification numbers. While the national database itself maintains strict infrastructure, the weak link here was from a third-party partner that was granted legitimate API access. According to The Register, private Danish IT and data services firm Pays ApS was the entry point for the attack as it utilizes the CPR database to validate business customer records, but someone at Pays ApS apparently fell asleep during cybersecurity training.
The self-identified hacker revealed that they gained access to the database via a Pays ApS account that was secured by "123456" as...
Copyright of this story solely belongs to hothardware.com. To see the full text click HERE
