Denmark data breach exposes 8.8M people's personal data

	Denmark data breach exposes 8.8M people's personal data(cpr.dk)
	501 points by clan 9 days ago \| 350 comments
	tl;dr: Denmark's Central Person Register (CPR) suffered a breach in which attackers abused a Danish company's legitimate access to the system to obtain names, addresses, and CPR numbers of roughly 8.8 million registered citizens. Individuals with name/address protection were not exposed. Authorities have revoked the company's access, notified the Data Protection Agency, and launched a police investigation.
	HN Discussion: ↑General fatigue and distrust toward institutions handling personal data due to repeated breaches ↑Breach highlights hypocrisy of Denmark pushing Chat Control while failing at basic security ~Scope of breach is actually worse than reported, affecting essentially all citizens plus sensitive data ↑Danish public sector has long neglected IT security and digitalization competence ~Silver lining: breach may force reform of using CPR numbers as secret identifiers