Learn
archived
Denmark CPR Registry Breach Exposes 8.8M National IDs via Company Account
- Engineer — Learn: The attack exploited a private company’s delegated API access to a national ID registry rather than a software vulnerability — a useful reminder to audit and scope any third-party data access credentials your systems issue or consume.
- SOC/IR — Learn: No IOCs or ATT&CK-mapped TTPs are provided, but the pattern — abusing a legitimate, authorized account to bulk-exfiltrate sensitive records — is worth adding to threat models for detecting anomalous query volumes against data APIs your estate exposes.
- Leader — Learn: Illustrates how third-party contractual data-access rights can become an attack vector at national scale; useful context for the next vendor risk review cycle, particularly for any SaaS providers with privileged access to your identity or HR data stores.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.