Lessons from Denmark’s CPR breach

Why knowledge-based authentication is inadequate and what to do instead On October 5, 2026, the Danish government announced that unauthorized parties had accessed data on about 8.8 million people in the Central Person Register (CPR), Denmark’s national civil register. The data includes the names, addresses and CPR numbers of residents, people living abroad and people […] The post Lessons from Denmark’s CPR breach first appeared on OpenID Foundation .