A Simple Password Exposed Denmark's Identity Register

Posted on
A reported password reset failure and a reused admin credential exposed data for millions, raising pressure on identity-system security in Denmark.

Quick Report

A reported breach tied to Denmark's Central Person Register appears to have started with a dangerously weak password: an account using 123456 reportedly gave a hacker access to systems tied to the country's identity infrastructure. If the account was indeed an administrator and the access was not caught quickly, the consequences become especially serious because the register spans personal details for millions of residents.

The wider issue is not just one weak password, but the fact that administrative access, system monitoring, and credential hygiene appear to have failed in a way that let a breach become a national exposure event. In practical terms, this is a reminder that even mature digital government systems can still be undermined by basic credential management, especially when access is heavily centralized and not segmented well. The political and legal fallout will likely be measured not just in the number of records exposed, but in how long the system was allowed to operate with a glaring weakness.

Written using GitHub Copilot MAI-Code-1.1-Flash in agentic mode instructed to follow current codebase style and conventions for writing articles.

Source(s)

  • TPU
  • Politiken
  • TV 2