Omfattende uautoriseret adgang til borgeres CPR-oplysninger
Summary
Denmark’s CPR system disclosed a major security incident in which unauthorized access exploited a legitimate business lookup to obtain personal data for about 8.8 million citizens. The breach reportedly did not include names and addresses of individuals with name/address protection; CPR blocked the offending access and alerted authorities for investigation by Datatilsynet and police.