The Central Person Register (CPR) has identified a serious security incident. By misusing a Danish company's legal access to search for information in the CPR system, unauthorized individuals have gained access to names, addresses, CPR numbers, etc., for approximately 8.8 million registered citizens in the CPR system.
The review conducted shows that the unauthorized access does not include names and addresses of individuals who have chosen to register with name and address protection.
The CPR administration has stopped the company's access and is working with specialists and authorities to map the course of events. The CPR administration has reported the incident to the Data Protection Agency, and the case is being investigated by the police in collaboration with relevant authorities.
It is possible to read more about this security incident on the Ministry of Higher Education and Science's website: https://ufm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/
