Back Techpowerup

Hacker Says a "123456" Password Got Them Into Denmark's ID Register, Exposing 8.8 ...

Techpowerup • October 15, 2026

12 on Hacker Says a "123456" Password Got Them Into Denmark's ID Register, Exposing 8.8 Million People

DrUsmanSaleem it's probably time to change it.

kondamin That’s, euhm damn. One would think security would be slightly better than this. And I don’t know, regular auditing of that infrastructure mandated by law before giving a private company access to such a thing.

Athena actually, this is super common, lots of times this is a "temp" password, and they 'forget' to change it to something better... I still don't see why they don't have the info in different databases, and pair encrypted, so getting the data off one server is no big deal, and you need the other one, but that one should be locked down so no external access, and everything is monitored / logged so you can tell when a bot is trying to get in

FoulOnWhite Sophie Laursen should be fired

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Weak Password Breach Exposes Danish National Registry Data A hacker reportedly accessed Denmark's national ID register using the simple password '123456', exposing sensitive information of approximately 8.8 million citizens. The breach began on September 10 and went undetected for 10 days until its discovery on October 2, 2026. The incident highlights severe security flaws in the Danish government's data protection practices, as the use of such a weak password allowed unauthorized access to critical government data. This breach serves as a stark reminder of the importance of strong password policies and practices in safeguarding sensitive information. The Danish government has not yet released specific details on remedial actions taken following the breach. The incident raises questions about the security protocols in place for managing sensitive databases. 2 sources 65

Hacker Says a "123456" Password Got Them Into Denmark's ID Register, Exposing 8.8 ...

The full story

Extracted Entities

Attack Types (1)

Countries (1)