`123456' password used in Danish CPR data breach

本文为原文前 6,000 字符的节选翻译，完整内容请查看原文。

At least three accounts at the company linked to a major breach of Denmark’s CPR register reportedly used the password “123456”, including an administrator account.

据报道，与丹麦中央民事登记（CPR）系统重大数据泄露事件相关的一家公司中，至少有三个账户使用了“123456”作为密码，其中包括一个管理员账户。

At least three user accounts at the Funen-based IT company Pays used the password “123456” when hackers gained access to Denmark’s CPR register, Politiken reports.

据《政治报》（Politiken）报道，当黑客获取丹麦CPR系统访问权限时，位于菲英岛的IT公司Pays至少有三个用户账户使用了“123456”这一密码。

One of them was the company’s administrator account.

其中一个账户是该公司的管理员账户。

The breach exposed information linked to around 8.8 million CPR numbers. The CPR system is Denmark’s central civil registration database and contains personal information on people living or previously registered in Denmark.

此次泄露事件暴露了与约880万个CPR号码相关的信息。CPR系统是丹麦的中央民事登记数据库，包含居住在丹麦或曾在丹麦登记的人员的个人信息。

The newspaper Politiken reviewed data from the breach that the hacker allegedly used to gain access to the system.

《政治报》查阅了黑客据称用于获取系统访问权限的泄露数据。

Jens Myrup Pedersen, professor at Aarhus University’s Department of Electrical and Computer Engineering, described the company’s password security as “hopeless”.

奥胡斯大学电气与计算机工程系教授延斯·米鲁普·佩德森（Jens Myrup Pedersen）形容该公司的密码安全性“无可救药”。

“There is really no security, it is an open door. A password like ‘123456’ is one of the very first things you would guess if you took a list of common passwords,” he told Politiken.

他告诉《政治报》：“这根本没有安全性可言，就像敞开的大门。如果你拿出一份常用密码列表，‘123456’绝对是你最先猜到的密码之一。”

“I find it hard to see that you could have worse security. It was a matter of time before things went wrong.”

“我很难想象还有比这更糟糕的安全性了。出事只是时间问题。”

Pays ApS, based in Odense, confirmed to TV 2 on Friday that it was the company whose access had been compromised.

位于欧登塞的Pays ApS公司周五向丹麦电视二台（TV 2）证实，其访问权限确实遭到了破坏。

“We can confirm that we are the company that has been subjected to an attack where our legal access to search for information in the CPR system has been abused,” managing director and owner Sophie Laursen said in an email to TV 2.

公司总经理兼所有者索菲·劳尔森（Sophie Laursen）在给TV 2的电子邮件中表示：“我们可以确认，我们公司遭受了攻击，我们在CPR系统中搜索信息的合法访问权限被滥用了。”

The hacker had access to the CPR register from 10 September for a total of 21 days and 17 hours.

黑客从9月10日开始访问CPR登记系统，总计持续了21天17小时。

An anonymous hacker told Politiken on Thursday that they were behind the attack and claimed gaining access had not been particularly difficult.

一名匿名黑客周四告诉《政治报》，他们是此次攻击的幕后黑手，并声称获取访问权限并不困难。

According to the hacker, access was initially obtained using a leaked password belonging to a former employee of a small Danish company. The hacker then allegedly created two computer programs to retrieve information from the CPR system and store it externally.

据该黑客称，他们最初是利用一名丹麦小公司前员工的泄露密码获取了访问权限。随后，黑客据称编写了两个计算机程序，用于从CPR系统中提取信息并将其存储在外部。

The hacker told Politiken that there were no plans to sell or publish the information.

黑客告诉《政治报》，他们没有出售或发布这些信息的计划。

Private companies and associations can be granted access to information in Denmark’s CPR register when they have a legitimate need, for example to obtain address information about customers or members.

私营公司和协会在有合法需求时（例如获取客户或成员的地址信息），可以获准访问丹麦CPR登记系统中的信息。

According to Denmark’s Central Business Register, Pays ApS had two employees as of July 2026.

根据丹麦中央商业登记处的数据，截至2026年7月，Pays ApS拥有两名员工。

Danish motorists received almost 21,000 penalty points for using handheld mobile phones while driving last year – the highest number in four years.

去年，丹麦驾驶员因开车时使用手持手机而被扣除近21,000个罚分，这是四年来的最高纪录。

Mobile phones are playing a growing role in traffic offences in Denmark.

手机在丹麦交通违法行为中扮演的角色日益突出。

In 2025, motorists received 20,910 penalty points on their driving licences for using a handheld mobile phone behind the wheel, according to figures from the police case management system POLSAS.

根据警方案件管理系统POLSAS的数据，2025年，驾驶员因在驾驶时使用手持手机，其驾照共被扣除20,910分。

That means mobile phone use accounted for roughly one in every four of the 84,056 penalty points issued for traffic offences during the year.

这意味着，在全年因交通违法行为发出的84,056个罚分中，使用手机导致的扣分约占四分之一。

The number of mobile-related penalty points increased by 7.5 percent compared with 2024 and reached its highest level in four years.

与2024年相比，与手机相关的罚分数量增加了7.5%，达到了四年来的最高水平。

On average, police issued 57 penalty points every day for handheld mobile phone use.

平均而言，警方每天因使用手持手机开出57个罚分。

Britta Bjerregaard, claims director at insurance company Alm. Brand, described the development as deeply concerning.

保险公司Alm. Brand的理赔总监布丽塔·比耶雷加德（Britta Bjerregaard）称这一趋势令人深感担忧。

“Most people know full well that the phone should stay put while driving. Still, it can be tempting to just answer a call, reply to a message, or change the song,” she said.

她说：“大多数人都非常清楚开车时应该放下手机。但即便如此，接听电话、回复信息或切换歌曲的诱惑依然存在。”

“Traffic does not pause while you look at the screen.”

“当你盯着屏幕看时，交通并不会暂停。”

89 metres without wa

在没有注意的情况下行驶了89米