Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark's national population register, the country's digitalization ministry said on October 5. They used a private Danish company's lawful right to look up records in the Central Person Register (CPR). The ministry has told people never to

Unauthorized parties accessed names, addresses, and personal identification numbers for approximately 8.8 million people through a Danish company’s legitimate access to the Central Person Register. The access occurred over about 10 days in September, was detected on October 2, and the company’s access was subsequently stopped while authorities investigated. The report does not identify any AI involvement; RealGround analysis therefore classifies this as a broader data-leakage and access-governance issue, with implications for assessing sensitive-data controls and incident readiness in AI-enabled environments.