Confirmed breach

Danish Meteorological Institute data breach

DKDenmark · Датский метеорологический институт

UA.NEWS, TV SYD and Berlingske reported a data breach at Danish Meteorological Institute (Denmark) on 4 November 2026, and it has been confirmed. It affected 5,000 people.

People affected: 5,000people
Reported: 4 November 2026News report and 8 more

Who is affected: Denmark, Estonia, Finland, Iceland, Latvia, Norway, Sweden

What was exposed 7

Passwords and logins
Email addresses
Names
Citizenship
License numbers
Nationalities
Pilot certificate numbers

How it happened

How: Software flaw after discovering vulnerabilities in PHP software source
Our translation from Russian
после обнаружения уязвимостей в программном обеспечении PHP
Way in: Northavimet who used the Nordic meteorological portal Northavimet source
Our translation from Russian
пользовавшихся нордическим метеорологическим порталом Northavimet

What changed since it was first reported

11 November 2026 Confirmed breach (TV SYD)
11 November 2026 Confirmed breach, 5,000 people (Ekstra Bladet)

Sources 9

News reportTV SYDMajor data breach at DMI: Thousands have had their personal information stolen (our translation from Danish)4 November 2026
Confirmed by DMI: This is stated by DMI on its website on Wednesday
Our translation from Danish
Det oplyser DMI på sin hjemmeside onsdag
News reportdmi.dkInformation about data breach (our translation from Danish)4 November 2026
Archived copy Wayback Machine, 5 November 2026
Confirmed by DMI: DMI has identified a security breach on the website NorthAvimet
Our translation from Danish
DMI har konstateret et sikkerhedsbrud på hjemmesiden NorthAvimet
News reportDRDMI reports data breach (our translation from Danish)4 November 2026 · 5,000 people
Archived copy Wayback Machine, 4 November 2026
Confirmed by DMI: DMI reports data breach
Our translation from Danish
DMI melder om databrud
News reportBerlingske5000 pilots had personal information stolen in data breach at DMI (our translation from Danish)4 November 2026

Show all 9 sources

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

If Danish Meteorological Institute had your data

Look for Danish Meteorological Institute’s own notice or letter: it should say what of yours was involved. Keep it.
Change your Danish Meteorological Institute password, and the same password anywhere else you use it. Turn on two-step sign-in.
Your email address is out: expect convincing phishing. Open Danish Meteorological Institute by typing its address yourself, never through a link in an email or text, and check the sender before you reply.
Expect scams that use your details: calls, texts or emails pretending to be Danish Meteorological Institute, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use Danish Meteorological Institute? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the Danish Meteorological Institute breach

Was Danish Meteorological Institute hacked?

UA.NEWS, TV SYD and Berlingske reported a data breach at Danish Meteorological Institute (Denmark) on 4 November 2026, and it has been confirmed. It affected 5,000 people. How it happened, by the sources: software flaw, through Northavimet.

What data was exposed in the Danish Meteorological Institute breach?

Passwords and logins, Email addresses, Names, Citizenship, License numbers, Nationalities and Pilot certificate numbers, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Danish Meteorological Institute data breach settlement?

No settlement open for claims is on record for Danish Meteorological Institute as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the Danish Meteorological Institute breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Danish Meteorological Institute’s own site, or check the letter here.

More breaches in Denmark

Every breach in Denmark →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.