← Wednesday, October 7, 2026SecurityNews
Misuse of legitimate access exposes 8.8 million Danish residents’ data
Unauthorized users misused a company’s lawful access to Denmark’s CPR system to obtain personal data on about 8.8 million people. The incident highlights the risk of abuse through authorized integrations.
- What
- Denmark’s CPR system reported unauthorized access to names, addresses and CPR numbers of about 8.8 million residents through a company’s lawful search access.
- How
- The affected company’s access was stopped; people with protected names and addresses were not included in the unauthorized access.
- Why it matters
- The incident shows why sensitive systems need controls against misuse of legitimate data access.
Read on cpr.dk → Hacker News · 350 comments
Discussion
Discussion is not switched on yet. Use Note above to keep your own thoughts on this story.
Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.