Denmark Data Breach Exposes 8.8M People's Personal Data

Denmark’s CPR national registry suffered a major data exposure when an authorized company’s access was abused to retrieve names, addresses, and personal ID numbers for about 8.8 million people. For CIOs, the incident highlights that the biggest risk is often not a perimeter breach but weak controls around third-party and privileged access, with major implications for citizen trust, regulatory scrutiny, and operational resilience. IT organizations should treat this as a reminder to strengthen access governance, continuous monitoring, and response processes across all systems holding sensitive identity data.