Attackers misused a private company's lawful lookup access to Denmark's Central Population Register during September and pulled names, addresses and CPR numbers for about 8.8 million people, more than the living population. The intrusion was noticed on October 2 and announced October 5. Residents are warned to expect convincing scam calls.
What to do: Company access blocked; police investigation and security review under way.
· 31 days ago · about 8.8 million people · Cyber Security News
SourcesCyber Security News
Why this score
An entire national identity registry (impact 4), completed mass extraction (exploitability 2), government as the primary target (criticality 2). Single secondary source so far; CPR administration statement to be linked.