National registry breach exposes data tied to 8.8 million people
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Tuesday, October 6th, 2026.
Denmark’s national population registry has exposed personal information tied to approximately 8.8 million people. Attackers misused a private company’s legitimate access to obtain names, addresses, CPR identification numbers, and other information. The incident happened in September and was discovered on October 2nd. The company’s access has now been blocked, and police are investigating.
The affected records cover current residents, people who moved abroad, and deceased people. That amounts to about eighty percent of the 11 million records held in the system. The practical risk is that fraudulent calls, emails, and identity checks can now look unusually credible because criminals may already know details people normally use to verify a sender.
For leaders, third-party access to authoritative data needs the same scrutiny as direct access. For defenders, the priority is monitoring partner queries for enumeration patterns and being able to suspend questionable connections quickly. Audit third-party registry access, investigate unusual query volumes, and remind affected people to verify unsolicited communications through an independent official channel.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
