Just so everyone understands the numbers thats basically everyone in Denmark.

That's, like, the whole country...

Danes have never been good at cybersecurity.

For some more context for non-danes:

Basically any company can access to an API that lets you look up CPR(~SSN) numbers, and a lot of companies have access.

What has most likely happened is such an integration has been abused - we do not yet know whether it's by mistake or by some malicious third party. It wouldn't surprise me in the slightest if this is just the result of someone's Claude agent telling them that they can improve lookup times if they just enumerate every CPR number and cache them, for example - but we don't know yet.

GDPR already says companies should only keep data they actually need. Breaches like this suggest the fines still aren't big enough to change how they behave.

And guess who are pushing for the Chat Control.

Isn't that more than the current population of Denmark? Who were the other exposed people?

I’ve opened the story just to search for “Russia”

Of course, Russia is being blamed twice for this data breach in the comments.

I am not disappointed.

Altman at it again?

so more data breached than people live in Denmark..