An Entire Country Just Got Leaked...

[BLUF]
A massive data breach in Denmark exposed the personal information of approximately 8.8 million citizens after hackers exploited a weak password ("123456") to access a company's authorized backend for the national CPR registry 0:16. The incident, which went undetected for ten days, was only discovered by the accounting department due to suspicious billing costs rather than automated IT security alerts 2:58.

Key Takeaways:
• The breach targeted APS Pays, a small company with authorized access to Denmark's CPR registry, which functions similarly to a social security system integrated into daily life 1:36.
• Hackers gained entry using the password "123456," allowing them to perform approximately 14 million search entries, with about 8 to 9 million returning valid data including names and addresses 2:11.
• The intrusion was identified not by IT security teams but by the accounting department, which noticed anomalous spikes in service fees associated with the excessive lookups 2:58.
• This event highlights the critical vulnerability of relying on human negligence and weak credentials in systems that hold sensitive government data, contrasting with fears of complex AI-driven attacks 5:07.
• The speaker compares this to other recent breaches, such as the ID verification company idcan.net, illustrating how third-party vendors often become the weakest link in national security infrastructure 10:18.
• Although the hacker leaked the data publicly, there is currently no evidence it has been sold on the dark web, though the exposure of nearly the entire Danish population remains a significant privacy crisis 4:32.

Closing Statement
This incident serves as a stark reminder that sophisticated security measures are often undermined by basic human error and poor password hygiene, leaving vast amounts of personal data vulnerable to exploitation.

Sources:

• 0:16 Introduction of the "123456" password as the key to the breach.
• 1:36 Identification of APS Pays as the compromised company with CPR registry access.
• 2:11 Details on the volume of searches and the number of records exposed.
• 2:58 Explanation of how the accounting department discovered the breach via billing anomalies.
• 4:32 Information regarding the public leak of the data and current status on the dark web.
• 5:07 Discussion on the simplicity of the password and the lack of automated security flags.
• 10:18 Comparison to the idcan.net breach and the general vulnerability of third-party ID verification services.