CONNECT WITH US
Tech

Tech

Hacker claims ‘123456’ password let them breach the Danish national registry, accessing 8.8 million records

Tom's Hardware logo

Published on

Add as a preferred source on Google
Hacker claims ‘123456’ password let them breach the Danish national registry, accessing 8.8 million records

A person claiming to be responsible for the recent hack of Denmark’s national registry claimed that they were able to gain access because of an IT company’s weak password. According to The Register, Pays ApS, an IT and data services company that lets customers reference the Danish Central Register of Persons (CPR) was the source of the hack, with the hacker saying that one of the accounts they breached was only protected by a ‘123456’ password.

Copenhagen has confirmed the hack, with a government official saying that the breach was discovered 12 days after it happened when an invoice revealed an unusual amount of activity from the company. The Danish government said that 8.8 million records have been illicitly retrieved, although the hacker claimed that they do not intend to sell or leak the information. While the government did not mention which company the hacker exploited, Pays ApS managing director Sophie Laursen confirmed that the hacker used the company’s access to the database to exfiltrate the data.

This incident shows that a system’s security is only as strong as the weakest link, with the Danish database getting compromised through a third-party user’s poorly chosen password. Given that CPR essentially contains information on virtually every Danish citizen, one would expect that it would require users to at least have a more complicated password, if not two-factor authentication. This isn’t the first time that an incident reveals shortcomings in government database protection, though — Indonesia realized that it had no backups when a ransomware attack in 2024 affected over 230 public agencies, while South Korea lost 858 terabytes of data after a catastrophic fire at a government data center last year.


Source link
Related Topics:Tech

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.