Hacker says weak password led to breach of Denmark’s national registry
Denmark says 8.8 million records were taken after an access account at a supplier was used to pull data from the registry.
A hacker says a weak password on an access account at Pays ApS helped them pull data from Denmark’s Central Register of Persons, and the Danish government says 8.8 million records were taken. Copenhagen says it found the incident 12 days after it began, when an invoice showed unusual activity from the company. Pays ApS managing director Sophie Laursen confirmed that the attacker used the company’s access to the database to exfiltrate the information. The incident is a reminder for software teams and operators that third-party access to sensitive systems needs stronger authentication and tighter controls, especially when it gates data about nearly an entire country.
Why it matters
The breach shows how a single third-party access account can expose a national database when controls are weak. For people whose data sits in shared systems, the risk is not only the core registry but every supplier link that can reach it. The fact that Copenhagen found the incident 12 days after it began also points to a delay in spotting misuse once access was abused.
Keep or strike?
Does this story matter, or is it hype? Mark it before you see what everyone else did.
Sources
- Tom's Hardware