Registre central de la population danois (CPR)
HighReportedPublic sector
Denmark's Central Population Register (CPR) announced on 5 October 2026 that about 8.8 million people are affected by a data breach, roughly 80% of the 11 million entries in the register. Those affected include people living in Denmark, people who have moved abroad and deceased people. According to the official communications reported, attackers used a private company's legitimate access to the system in September 2026 to obtain names, addresses, CPR numbers and other information. The data protection authority states that brute-force enumeration of valid CPR numbers preceded the extraction.
A name, address and CPR number together allow a malicious third party to run highly convincing fraudulent calls or messages, since the sender appears to already know this personal information.
- Disclosed on
- October 5, 2026
- Accounts affected
- 8.8M
- Sector
- Public sector
- Country
- Denmark
- Cause
- Credential stuffing
Exposed data
- Full name
- Postal address
- Customer ID
You are only affected if you had an account or an order with this organisation.
What you can do
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact