--- title: Danish population register breach exposes about 8.8... description: Denmark's Central Population Register suffered what officials call the country's largest-ever data breach, exposing roughly 8.8 million records including... canonical: https://daily.dev/posts/danish-population-register-breach-exposes-about-8-8-million-records-xfv7urepy twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Danish population register breach exposes about 8.8 million records | daily.dev og:description: Denmark's Central Population Register suffered what officials call the country's largest-ever data breach, exposing roughly 8.8 million records including... og:url: https://daily.dev/posts/danish-population-register-breach-exposes-about-8-8-million-records-xfv7urepy og:image: https://api.daily.dev/og/posts/XFV7uREPY.png og:image:alt: Danish population register breach exposes about 8.8 million records og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Danish population register breach exposes about 8.8 million records **[Collections](https://daily.dev/sources/collections)** · 2 min read · 0 upvotes · 0 comments ## Summary Denmark's Central Population Register suffered what officials call the country's largest-ever data breach, exposing roughly 8.8 million records including names, addresses, and Danish ID numbers. A private company with legitimate access to the registry had its credentials abused to extract the data in September; the irregular activity was detected October 2 and the company's access was blocked. Police and the Danish Data Protection Agency are investigating. The incident has reopened debate over whether CPR numbers should still function as secret identifiers given how widely they're queried, with a cybersecurity specialist arguing the numbers were never truly secret. Denmark joins Turkey and India among countries that have had national ID databases leaked. ## Content Someone abused a private Danish company's legitimate access to Denmark's Central Population Register (CPR) and pulled out most of its contents. The data covers roughly 8.8 million records, which is more than the country has residents. That's because the register also includes people who have died and people who moved abroad. The exposed information includes names, addresses, Danish ID numbers and other personal details. Officials describe it as the largest data breach in Danish history. ## What happened The extraction took place in September. The CPR administration spotted irregular activity on October 2, traced it back to the previous month, and blocked the company's access. It notified the Danish Data Protection Agency, and police are investigating. The attackers didn't break into the system from outside. They used a company's lawful access, which is what makes this one uncomfortable: the door was open to someone who was supposed to be able to use it. ## The CPR number problem Officials haven't decided whether to reissue all CPR numbers. A cybersecurity specialist argued that the real flaw is treating these numbers as secret identifiers at all. If a number is used to prove who you are, and it sits in a register that many organizations can query, then it was never going to stay secret. I think that's a fair point, and a breach this size makes it hard to argue with. Denmark isn't the first country to go through this. Similar leaks have hit national ID databases in Turkey and India. ## Questions this post answers ### How did attackers get access to Denmark's Central Population Register data breach in September? Attackers abused a private company's legitimate, authorized access to the CPR register rather than breaking in externally. The extraction occurred in September, covering roughly 8.8 million records including names, addresses, and Danish ID numbers. The CPR administration detected irregular activity on October 2, traced it back a month, and revoked the company's access, with police now investigating. _Following how trusted third-party access gets abused in breaches like this one is easy to track on daily.dev._ ## Similar posts on daily.dev - [Danish university DTU breach exposes data of up to 200,000 people](https://daily.dev/posts/danish-university-dtu-breach-exposes-data-of-up-to-200-000-people-l2s8cnaej) · BleepingComputer · 1 upvotes · 0 comments - [Another massive data breach exposed millions of driver’s license numbers](https://daily.dev/posts/another-massive-data-breach-exposed-millions-of-driver-s-license-numbers-z6spff7ie) · TechCrunch · 0 upvotes · 0 comments - [France's 'Secure' ID agency probes claimed 19M record breach](https://daily.dev/posts/france-s-secure-id-agency-probes-claimed-19m-record-breach-wwv4gvjvl) · The Register · 0 upvotes · 0 comments - [Hacker wipes Romania's entire land registry database](https://daily.dev/posts/hacker-wipes-romania-s-entire-land-registry-database-tdzwvjrkh) · Hacker News · 0 upvotes · 0 comments --- Tags: [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/danish-population-register-breach-exposes-about-8-8-million-records-xfv7urepy) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Danish population register breach exposes about 8.8 million records","url":"https://daily.dev/posts/danish-population-register-breach-exposes-about-8-8-million-records-xfv7urepy","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/danish-population-register-breach-exposes-about-8-8-million-records-xfv7urepy"},"datePublished":"2026-10-06T11:53:56.602Z","dateModified":"2026-10-06T11:54:40.159Z","description":"Denmark's Central Population Register suffered what officials call the country's largest-ever data breach, exposing roughly 8.8 million records including...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/42479c961a37db44bf25484182cfa1c6?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/42479c961a37db44bf25484182cfa1c6?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/danish-population-register-breach-exposes-about-8-8-million-records-xfv7urepy","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"data-breach","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Danish population register breach exposes about 8.8 million records"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/danish-population-register-breach-exposes-about-8-8-million-records-xfv7urepy#faq","mainEntity":[{"@type":"Question","name":"How did attackers get access to Denmark's Central Population Register data breach in September?","acceptedAnswer":{"@type":"Answer","text":"Attackers abused a private company's legitimate, authorized access to the CPR register rather than breaking in externally. The extraction occurred in September, covering roughly 8.8 million records including names, addresses, and Danish ID numbers. The CPR administration detected irregular activity on October 2, traced it back a month, and revoked the company's access, with police now investigating. Following how trusted third-party access gets abused in breaches like this one is easy to track on daily.dev."}}]} ```