Wire · regulatory
123456' password used in massive Danish CPR data breach
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 11 October 2026 · Fusion42 review
At least three user accounts including an administrator at the IT company Pays used the weak password '123456' during the breach of Denmark's Central Person Register (CPR), allowing hackers prolonged access for nearly 22 days.
This Wire brief sits within Fusion42's coverage of Cybersecurity.
◆ ◆ The Wire takeaway
You face immediate pressure to upgrade access controls and password policies as weak credentials remain a glaring vulnerability for critical government data. This breach opens the door to regulatory scrutiny and liability for anyone handling sensitive identity data.
◆ Coverage
1 source · 10 Oct 2026
◆ Related on Wire
◆ Topics