The Danish government confirmed a catastrophic cyber incident after unauthorized intruders compromised its central national identity database, stealing millions of private citizen records. Government officials confirmed that the massive security breach exposed sensitive personal data belonging to roughly 8 million living Danish citizens, foreign residents, overseas workers, and deceased individuals.

Danish Minister Christina Egelund publicly acknowledged the intrusion into the country’s Central Person Register, describing the attack as a serious security failure. Stolen files contain unencrypted personally identifiable details, including full legal names, physical home addresses, national social security numbers, and associated contact records.

The Central Person Register serves as the core identity registry for Denmark. Government agencies and financial institutions rely on the system to verify individual tax filings, process social security benefits, issue official documents, and grant access to public services. Denmark currently holds a total living population of around 6 million people, but the historical database maintains identity files for roughly 11 million individuals, with records stretching back over multiple decades.

The intrusion took place in September, but security personnel only uncovered the unauthorized access on October 2. Danish authorities declined to identify the specific threat actor or hacking syndicate responsible for the heist. However, investigators revealed that intruders gained access by abusing third-party API credentials belonging to a private Danish firm that held legitimate system permissions to run identity verification checks.

This incident stands as the largest cyber heist in Denmark’s history, mirroring similar massive breaches targeting national identity registries worldwide. In 2016, a massive breach exposed national identity cards for tens of millions of Turkish citizens, while India’s national Aadhaar database suffered several major data exposures revealing personal records for vast populations.

Allowing third-party corporate partners to access central government registries without enforcing continuous behavior monitoring creates severe national security vulnerabilities. When hackers compromise secondary software vendors or abuse legitimate credentials, traditional perimeter firewalls fail completely. Automated threat detection tools must monitor external API queries in real time to flag unusual data retrieval patterns before massive data extraction occurs.

Exposing unencrypted national identification numbers leaves millions of citizens vulnerable to widespread financial fraud, targeted phishing campaigns, and synthetic identity theft for years to come. Stolen tax identification codes allow bad actors to open fraudulent bank accounts, claim illegitimate government benefits, and file fake tax refunds under real victims’ names.

Danish authorities now face the difficult task of revoking compromised access paths, tightening third-party auditing standards, and assisting millions of affected residents in securing their financial accounts against ongoing misuse. Rebuilding public trust in government digital services requires introducing strict multi-factor authentication requirements, encrypting legacy databases at rest, and enforcing zero-trust access policies across every private software integration point moving forward.