Denmark hit by massive data breach due to password '123456'

Denmark's national population database suffered a major data breach due to negligence by IT company Pays ApS, which had access to the system. Three of the company's accounts, including an administrator profile, were protected by the simple password '123456'.

The hacker managed to make over 14 million automated requests, gaining access to citizens' names, addresses, and identification numbers. Suspicious activity was not detected immediately — the system was checked only after an unusually large bill for database queries arrived. The hacker claims to have used credentials of a former employee, but this has not yet been officially confirmed.