Denmark CPR Breach: When Authorized Access Becomes the Threat
In October 2026, Denmark disclosed that 8.8 million CPR records had been accessed through a legitimate company account. The password was “123456,” but the real vulnerability was structural: third-party access with no rate limiting or monitoring that could detect abuse in real time.