Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

Denmark's national population register experienced unauthorized automated lookups conducted through a private company's legitimate access, allegedly exposing names, addresses, and CPR numbers for about 8.8 million people; access lasted ~10 days in September, the company’s access has been revoked, police and the data protection authority are investigating, and officials warn citizens to guard against fraud and consider credit warnings while a full security review is carried out.