The Danish government has confirmed that a massive breach of its Central Person Register (CPR) database has affected 8 million citizens and residents, both at home and abroad.

Minister Christina Egelund described the incident as a ‘serious incident’ where hackers accessed personal details such as names, addresses, and Danish social security numbers. The CPR is a vital database used for tax payments and accessing government services, containing records for about 11 million people, some dating back decades.

The breach was discovered on October 2, but occurred in September, with the unauthorized access reportedly obtained by ‘abusing a Danish company’s lawful access to search for information in the CPR system.’ The Danish government has not revealed the identity of the hackers, but the incident is considered the largest in the country’s history.

This cyber-attack follows similar breaches in other countries, including Turkey and India, highlighting the ongoing threat to national identity databases. The Danish government is now facing the daunting task of assessing the damage and devising strategies to prevent future breaches.

The incident serves as a stark reminder of the vulnerabilities in our digital systems and the need for robust cybersecurity measures, especially in countries with extensive online government services.