# Denmark confirms illicit retrieval of 8.8 million registry records

_Published Tuesday, October 13, 2026 at 10:03 AM EDT · Security · Latest · Tier 2 — Notable_

![Hacker — Primary](https://cdn.mos.cms.futurecdn.net/9fQFudMNzx5vudaaaTqZiX-2000-80.jpg)

Denmark's government confirmed that 8.8 million records were illicitly retrieved from its Central Register of Persons through a company's database access. Pays ApS managing director Sophie Laursen confirmed that the attacker used the IT and data services company's access to extract the records.

The person claiming responsibility said one breached account used the password "123456." A government official said the breach was discovered 12 days after it happened, when an invoice showed unusual activity from the company. The attacker claimed they did not intend to sell or leak the information.

## Sources

- [Tom's Hardware](https://www.tomshardware.com/tech-industry/cyber-security/hacker-claims-123456-password-let-them-breach-the-danish-national-registry-accessing-8-8-million-records-it-and-data-services-company-with-weak-passwords-linked-source-of-the-hack)

---
Canonical: https://techandbusiness.org/newswire/IVCYGHLWpfJ8qh6amd-xsA
Published: 2026-10-13T14:03:48.117Z
Story chronology: 2026-10-13T13:30:00.000Z
Retrieved: 2026-10-13T16:48:20.418Z
Publisher: Tech & Business (techandbusiness.org)