[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faQZRLiARl8aaeda9Jk3QEfm3Rs0jFnm2VUx6WnN_J8w":3},{"article":4,"iocs":52,"watch_terms":53,"solutions":54,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"ff33f4f0-d327-4d67-9f2d-5c7d4ddb5b2f","Denmark population registry data breach affects 8.8 million people","denmark-population-registry-data-breach-affects-8-8-million-people-2b5b7c","Denmark's Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals. [...]","Denmark's Central Population Register (CPR) has reported a significant data breach impacting approximately 8.8 million individuals, including current residents, those who have moved abroad, and deceased persons. Threat actors exploited a private Danish company's legitimate access to the registry to steal personal information such as names, addresses, CPR numbers, and dates of birth. The Danish Data Protection Agency indicated that brute-forcing was used to enumerate CPR numbers before data extraction.","Denmark's Central Population Register (CPR) suffered a data breach affecting 8.8 million individuals.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fdenmark-population-registry-data-breach-affects-88-million-people\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F12\u002F19\u002FDenmark.jpg","2026-10-05T15:21:10+00:00","2026-10-05T16:01:07.078155+00:00",8,[17,20,23,26],{"name":18,"type":19},"Central Population Register","product",{"name":21,"type":22},"Danish Data Protection Agency","vendor",{"name":24,"type":25},"threat actors","threat_actor",{"name":27,"type":28},"brute-forcing","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":29,"icon":31,"name":32,"slug":33},null,"Breaches","breaches",[35,37,42,47],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},{"category":38},{"id":39,"icon":31,"name":40,"slug":41},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":48},{"id":49,"icon":31,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":55,"vendors":142},[56,85,113],{"slug":57,"name":58,"problem":59,"products":60},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[61,69,77],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"slug":86,"name":87,"problem":88,"products":89},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[90,97,105],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":92,"url":95,"description":96},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"slug":114,"name":115,"problem":116,"products":117},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[],{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":161},"third-party-access-exploited-to-breach-denmarks-entire-population-registry","Third-Party Access Exploited to Breach Denmark's Entire Population Registry","Threat actors abused a private company's legitimate access to Denmark's Central Population Register (CPR) to enumerate and exfiltrate personal data on 8.8 million individuals using CPR number brute-forcing. The root cause is a failure to enforce granular, least-privilege access controls on a highly sensitive national database, combined with the absence of anomaly detection to flag bulk enumeration attempts. Allowing a third-party vendor unrestricted or overly broad query access to a national registry without rate limiting or behavioral monitoring created a catastrophic single point of failure. This breach matters because CPR numbers are permanent national identifiers used across Danish society — unlike passwords, they cannot be reset — making the long-term identity fraud risk severe and irreversible.",[148,149,150,151,152,153,154,155,156,157,158,159,160],"CIS Control 5: Account Management","CIS Control 6: Access Control Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SI-10: Information Input Validation","NIST SP 800-53 AU-6: Audit Record Review","GDPR Article 5(1)(f): Integrity and Confidentiality","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 28: Processor Obligations","GDPR Article 33: Notification of a Personal Data Breach","ISO\u002FIEC 27001:2022 A.8.3: Information Access Restriction","ISO\u002FIEC 27001:2022 A.5.23: Information Security for Use of Cloud Services",{}]