In Denmark, a massive data breach exposed the personal information of approximately 8.8 million individuals registered in the central population registry (CPR). An attacker hijacked the authorized access of company Pays ApS using the password « 123456 », which belonged to a former employee and had appeared in a previous data leak. Approximately 14 million unauthorized searches were conducted over a period of about twenty days before the access was closed on October 2. The incident was discovered through an unusually high consultation bill. The company’s access has been suspended, the data protection authority has been notified, and a police investigation has been opened.
Source: Read the original article

