Denmark CPR Registry Breach Exposes 8.8M National IDs via Company Account

Tue, 06 Oct 2026 17:10:43 +0000

Engineer — Learn: The attack exploited a private company’s delegated API access to a national ID registry rather than a software vulnerability — a useful reminder to audit and scope any third-party data access credentials your systems issue or consume.
SOC/IR — Learn: No IOCs or ATT&CK-mapped TTPs are provided, but the pattern — abusing a legitimate, authorized account to bulk-exfiltrate sensitive records — is worth adding to threat models for detecting anomalous query volumes against data APIs your estate exposes.
Leader — Learn: Illustrates how third-party contractual data-access rights can become an attack vector at national scale; useful context for the next vendor risk review cycle, particularly for any SaaS providers with privileged access to your identity or HR data stores.

Third-Party-Access on CuraSec