[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-weak-vendor-password-exposed-88-million-danish-records":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},11472,"weak-vendor-password-exposed-88-million-danish-records","Weak Vendor Password Exposed 8.8 Million Danish Records","A vendor's '123456' password let a hacker extract 8.8 million records from Denmark's national registry, exposing third-party access risks.","Denmark's national ID registry just got raided, and the break-in reportedly started with a password a toddler could guess.\n\nA hacker claims they broke into the Danish Central Register of Persons (CPR) through an account protected by nothing more than the password '123456.' That account belonged to Pays ApS, an IT and data services firm that resells access to the CPR database. Copenhagen says the breach went unnoticed for 12 days, until an invoice revealed unusually heavy activity from the company, and confirms 8.8 million records were taken. Pays ApS's managing director, Sophie Laursen, confirmed the company's database access was the entry point, though the hacker says they don't intend to sell or leak what they took.\n\nCPR holds identifying data on nearly every Dane, yet the system was only as strong as a third-party vendor's laziest password. No two-factor authentication, no complexity requirement, just six digits standing between a contractor and a national identity database. It's a reminder that government data protection increasingly depends on vendors most citizens have never heard of.\n\nCompare that to South Korea losing 858 terabytes in a data center fire or Indonesia discovering it had no backups after a 2024 ransomware attack, and '123456' starts to look less like an outlier and more like business as usual for government IT.","[\"data breach\",\"denmark\",\"password security\",\"third-party risk\"]","2026-10-13T13:30:00.000Z","2026-10-13T15:23:32.431Z","2026-10-13T15:23:36.132Z","published",null,[],"security",[26,27,28,29],"data breach","denmark","password security","third-party risk",[31],{"name":32,"url":33},"Tom's Hardware","https:\u002F\u002Fwww.tomshardware.com\u002Ftech-industry\u002Fcyber-security\u002Fhacker-claims-123456-password-let-them-breach-the-danish-national-registry-accessing-8-8-million-records-it-and-data-services-company-with-weak-passwords-linked-source-of-the-hack",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,85,90,95,100],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",6984,"2026-10-13T16:00:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",967,"2026-10-13T15:10:00.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",501,"2026-10-13T12:15:53.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",498,"2026-10-13T14:59:12.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",246,"2026-10-13T14:21:55.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",207,"2026-10-13T16:00:47.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Science","science",199,"2026-10-13T12:01:37.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Startups","startups",125,"2026-10-13T15:41:00.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Dev Tools","dev-tools",116,"2026-10-13T16:20:18.000Z",{"name":82,"slug":83,"count":79,"latest_published_at":84},"Software","software","2026-10-12T19:00:00.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"General","general",73,"2026-10-13T13:11:33.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"Gaming","gaming",64,"2026-10-13T15:59:07.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Reviews","reviews",35,"2026-10-12T14:00:00.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]