Hacker claims ‘123456’ password let them breach the Danish national registry, accessing 8.8 million records

A person claiming to be responsible for the recent hack of Denmark’s national registry claimed that they were able to gain access because of an IT company’s weak password. According to The Register, Pays ApS, an IT and data services company that lets customers reference the Danish Central Register of Persons (CPR) was the source of the hack, with the hacker saying that one of the accounts they breached was only protected by a ‘123456’ password.

Copenhagen has confirmed the hack, with a government official saying that the breach was discovered 12 days after it happened when an invoice revealed an unusual amount of activity from the company. The Danish government said that 8.8 million records have been illicitly retrieved, although the hacker claimed that they do not intend to sell or leak the information. …