A weak password exposed personal data of 8 point 8 million people in Denmark

A hacker accessed personal information belonging to 8 point 8 million people in Denmark through accounts secured with the password 123456. TechRadar, CyberSecurityNews, TechSpot, HotHardware, TechPowerUp, NDTV Profit, and BigGo Finance all reported on the breach. Three accounts shared the simple credentials, which granted access to the central national register. [1][2][3][4][5][6][7]

According to TechRadar, the unauthorized entry occurred through Pays ApS, a company located in Funen that had authorization to connect to the CPR system. Managing director Sophie Laursen later confirmed the involvement of the company. TechRadar noted that the business website was taken offline following the incident. [1]

The intrusive activity was discovered at the end of the month when a government worker noticed an unusually high activity log from the previous month. Citing local station TV 2, TechRadar reported that the hacker executed 14 million automated queries across a ten day period. [1]

Official statements noted that the investigation remains ongoing. TechRadar reported that measures were taken to strengthen security procedures, although the initial press release did not reveal the name of the attacker. [1]