The Register reports on a significant data breach affecting millions of Danes. And yes, the password that reportedly enabled access to the data was “123456.”
A person claiming responsibility for the breach of Denmark’s Central Register of Persons (CPR) says they gained access through an IT company’s account protected by the password “123456.”
The person told Danish news outlet Politiken they had no intention of selling or leaking the data. The newspaper reported that at least three company accounts, including an administrator account, used the same password.
Denmark’s CPR administration confirmed a breach affecting the information belonging to 8.8 million people on October 5, adding that a Danish company’s legal access to the CPR system was abused.
It did not name Funen-based Pays ApS as the company in question, but managing director Sophie Laursen confirmed on October 9 that it’s access had been exploited.
Read more at The Register.
