Danish Data Protection Agency

The breach does not impact those who opted for name and address protection.

In response, the Central Person Register has revoked the company's access, informed the Danish Data Protection Agency, and initiated a police investigation.

They are also urging the public to be cautious of unsolicited requests for personal information.

The register plans to review and enhance its security measures to prevent future incidents.

Next, what happened? According to Danish authorities, as reported by The Record and The Hacker News, the access came through a private company's lawful ability to search the register.

Over roughly ten days in September, someone ran what the Danish Data Protection Agency called a very large number of automated searches to work out which personal numbers were valid.

The register's administrators noticed the unusual activity and suspended the company's access.

The police are investigating.