Denmark data breach exposes 8.8M people’s personal data

Extensive unauthorized access to citizens’ CPR information

丹麦发生大规模数据泄露，涉及880万人的个人信息

公民个人注册号（CPR）信息遭大规模未经授权访问

The Central Person Register (CPR) has identified a serious security incident. By abusing a Danish company’s legitimate access to search for information in the CPR system, unauthorized parties have gained access to names, addresses, CPR numbers, and other data of approximately 8.8 million registered citizens in the CPR system.

丹麦中央个人注册局（CPR）近日确认发生了一起严重的安全事件。不法分子通过滥用一家丹麦公司对CPR系统的合法查询权限，获取了系统中约880万名注册公民的姓名、地址、CPR号码等个人信息。

The review conducted shows that the unauthorized access does not include the names and addresses of individuals who have chosen to register with name and address protection.

经审查显示，此次未经授权的访问并未涉及那些已选择进行姓名和地址保护的公民信息。

The CPR administration has terminated the company’s access and, together with specialists and authorities, is in the process of mapping the course of events. The CPR administration has reported the incident to the Danish Data Protection Agency, and the case is being investigated by the police in cooperation with relevant authorities.

CPR管理部门已终止了该公司的访问权限，并正与专家及相关部门合作，对事件经过进行调查梳理。CPR管理部门已向丹麦数据保护局报告了此事件，目前警方正与相关部门协作对此案进行调查。

It is possible to read more about this security incident on the Ministry of Higher Education and Science’s website: https://ufm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/

如需了解有关此安全事件的更多信息，请访问丹麦高等教育与科学部网站：https://ufm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/