Privacy Unpacked- Status
- Confirmed breach
- People affected
- 8,800,000 people
- Reported
- 5 October 2026
What was exposed
- CPR (national ID) numbers
- Government ID numbers
- Names
- Addresses
Confirmed breach
Danish Central Person Register (CPR) data breach
DKDenmark
Danish Central Person Register (CPR) (Denmark) notified the CPR office, Denmark of a data breach on 5 October 2026. It affected 8,800,000 people. Exposed: CPR (national ID) numbers, Government ID numbers, Names and Addresses.
If Danish Central Person Register (CPR) had your data
- Look for Danish Central Person Register (CPR)’s own notice or letter: it should say what of yours was involved. Keep it.
- An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
- Expect scams that use your details: calls, texts or emails pretending to be Danish Central Person Register (CPR), your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
More breaches in Denmark
- 3reported NamesAddresses 400Kcustomers
-
3 Danmark NamesAddresses 400Kcustomers
- University of Copenhagen CPR (national ID) numbersGovernment ID numbersEmail addresses+6 545Kpeople
- Novoreported NamesProfessional rankingsCommercial value assessments+7 46Khealthcare professionals
- Magasin NamesAddressesPurchase history –not reported
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.