ThreatPaper
Weak Evidence

Marital status, family and church data were exposed too

Assessment

The Copenhagen Post (via Ritzau) listed marital status, birth registration, family relations, Church of Denmark affiliation and legal incapacitation among data the register holds. The ministry confirmed only names, addresses and CPR numbers plus 'mv.' (etc.), and has not confirmed that these additional categories were retrieved per record. The list reflects the register's capacity and what section 38 can cover, not established exfiltration, so repeating it as fact for 8.8 million people goes beyond the primary record.

Where this claim appeared

The Copenhagen Post · 2026-10-05

https://cphpost.dk/2026-10-05/life-in-denmark/cpr-data-breach-exposes-personal-details-of-8-8-million-people-in-denmark/

What “Weak Evidence” means

Evidence exists but is thin, circumstantial, or explicitly qualified as weak by the source that published it. Shared hosting infrastructure between threat clusters is the recurring example.

3 of 5 · rating scale

Assessed in

Denmark CPR register: misused company access exposed data on 8.8 million people

Think this assessment is wrong? Report an error.