Danish authorities are probing an "extremely serious" breach of the Central Population Register after unknown actors accessed data for about 8.8 million people. The leaked records reportedly included names, addresses and CPR numbers, and access appears to have been gained using valid credentials from a Danish company. Investigations continue to determine the full scope and impact.
Massive Data Breach Exposes 8.8 Million Records From Denmark’s Central Population Register
FILE PHOTO - Danish flags hang from a store near Nyhavn, the popular tourist harbor in the center of Copenhagen. (is associated with: «Data breach hits Denmark's population register, affecting 8.8 million») Steffen Trumpf/dpa
Danish authorities are investigating an "extremely serious" breach of the Central Population Register (CPR) after unknown actors accessed personal information for an estimated 8.8 million people, officials said.
The compromised data reportedly included names, addresses, CPR identification numbers and other personal details. Preliminary findings indicate the attackers used legitimate login credentials tied to a Danish company to gain access to the system.
What Officials Are Saying
Christina Egelund, who leads the Ministry of Science, Higher Education, Research and Digital Affairs, described the incident as "extremely serious" and confirmed authorities are coordinating a full investigation.
"Along with all the relevant authorities, we are working to establish the full extent of the incident," Egelund said.
Scope And Potential Impact
The ministry said Denmark's population register contains records on about 11 million people — a figure that includes current residents, people who have moved abroad and deceased individuals. The CPR reportedly also stores information such as membership of the Church of Denmark and notes on legal incapacitation or restrictions on legal capacity.
Officials have not yet released a full list of affected records or confirmed whether sensitive categories beyond basic identity information were exposed. Investigations are ongoing to determine the exact method, timeline and scope of the breach.
What Affected People Should Consider
Authorities have urged vigilance while the investigation proceeds. Affected individuals may consider monitoring financial accounts, enabling fraud alerts or credit freezes where available, and following official guidance from Danish authorities for any next steps or notifications.
Further updates are expected as investigators and relevant agencies work to contain the incident and establish measures to prevent future breaches.
Help us improve.
