Denmark data breach hits 8.8M people via '123456' password

A hacker accessed Denmark's CPR register through an IT company account protected by the password '123456'. Data on 8.8 million people was affected; the intrusion ran from September 10 to 20 and was detected on October 2.

• Breach affected data on 8.8 million people in the CPR register
• At least three Pays ApS accounts used the password '123456'
• Intrusion ran September 10-20, detected only on October 2
• Attacker claims no intention to sell or leak the data