Denmark investigates breach exposing data of 8.8 million people
publishers 14articles 14first reported 5 Oct, 07:01 UTCdeveloping since 5 Oct · 7 editions
Denmark is investigating unauthorized access to its Central Person Register that exposed personal information belonging to about 8.8 million people, authorities said Monday.
The information accessed included names, addresses, CPR identification numbers and other information. The affected records include people currently living in Denmark as well as some who have died or moved abroad, explaining why the number exceeds the country’s population of roughly six million. The register holds records for about 11 million people.
Authorities said unidentified individuals exploited a Danish company’s legitimate ability to search the CPR system. The unauthorized searches occurred during September and irregular activity was detected on October 2. The company’s access has since been blocked.
An initial review found that names and addresses belonging to people enrolled in Denmark’s name and address protection program were not exposed. Officials have not specified exactly which additional information was accessed in each case.
Research, Education and Digitalisation Minister Christina Egelund called the breach a deeply serious incident and ordered a comprehensive security review of the registry. She also urged residents to remain alert for suspicious calls and emails.
The CPR administration has reported the breach to Denmark’s Data Protection Agency. Police are investigating alongside other authorities, and those responsible have not been identified.
HOW THIS STORY WAS MADE
Written from 7 articles, 6 with the publisher's own text; 7 independent newsrooms once syndicated copies count as one; this version written 6 h after the record first saw the story; the editor revised it.
- Publishers
- 14
- Source articles
- 14
- Given to the writer
- 7, 6 with the article's own text
- Independent newsrooms
- 7
- This version written
- 6 h after the record first saw the story
- Second model (editor)
- revised
- Publication gate
- passed
- Human review
- none
WHAT THE EDITOR DID
The second model checked the writer's draft against the same sources and changed it before publication. Struck words were in the draft; underlined words are its corrections.
WHAT IT FLAGGED editor revise: The story needs the scope of accessed information narrowed to match the sources’ caveat about unspecified additional data. - "The information accessed included names, addresses, CPR identification numbers and other registry data.": The sources say names, addresses, CPR numbers and other information/data were accessed, but cphpost says the ministry did not specify exactly which additional information was accessed in each case; stating other registry data as definitively accessed is too broad without that qualification. - "Officials have not specified what additional information may have been accessed in individual records.": This understates the source language, which says the ministry did not specify exactly which additional information was accessed in each case; as written after saying other registry data was accessed, it implies additional information may or may not have been accessed.
THE DRAFT AND THE CHANGES
Denmark investigates breach exposing data of 8.8 million people
Denmark is investigating unauthorized access to its Central Person Register that exposed personal information belonging to about 8.8 million people, authorities said Monday.
The information accessed included names, addresses, CPR identification numbers and other registry data.information. The affected records include people currently living in Denmark as well as some who have died or moved abroad, explaining why the number exceeds the country’s population of roughly six million. The register holds records for about 11 million people.
Authorities said unidentified individuals exploited a Danish company’s legitimate ability to search the CPR system. The unauthorized searches occurred during September and irregular activity was detected on October 2. The company’s access has since been blocked.
An initial review found that names and addresses belonging to people enrolled in Denmark’s name and address protection program were not exposed. Officials have not specified whatexactly which additional information may have beenwas accessed in individualeach records.case.
Research, Education and Digitalisation Minister Christina Egelund called the breach a deeply serious incident and ordered a comprehensive security review of the registry. She also urged residents to remain alert for suspicious calls and emails.
The CPR administration has reported the breach to Denmark’s Data Protection Agency. Police are investigating alongside other authorities, and those responsible have not been identified.
Written by a language model from the sources above, then checked by a second model that may only cut, attribute or correct. How it works →