← Back

Wire · regulatory

123456' password used in massive Danish CPR data breach

Published

10 October 2026

Topic

regulatory

◆ Sectors

Cybersecurity

◆ Geography

Denmark

◆ Source

Read at databreaches.net →

◆ Verified

Fusion42 · 11 October 2026 · Fusion42 review

At least three user accounts including an administrator at the IT company Pays used the weak password '123456' during the breach of Denmark's Central Person Register (CPR), allowing hackers prolonged access for nearly 22 days.

This Wire brief sits within Fusion42's coverage of Cybersecurity.

◆ ◆ The Wire takeaway

You face immediate pressure to upgrade access controls and password policies as weak credentials remain a glaring vulnerability for critical government data. This breach opens the door to regulatory scrutiny and liability for anyone handling sensitive identity data.

◆ Coverage

1 source · 10 Oct 2026

◆ Related on Wire

◆ Topics

Cybersecuritydata-breachcybersecuritypassword-securitygovernment-dataDenmark