What happened

Denmark's Central Person Register has been breached, exposing names, addresses and national identity numbers for about 8.8 million people, including emigrated and deceased residents. The attacker misused the lawful search access held by Pays ApS, a two-person IT supplier.

The person claiming the breach told Danish media that at least three supplier accounts, including an administrator account, used the password "123456". The government has not confirmed that claim. Authorities have blocked the supplier's access and police are investigating.

Why it matters

A national register was only as strong as its smallest supplier. Any third party with access to your systems effectively becomes part of your security perimeter, whatever their size.

How to protect your AWS environment

• Grant suppliers access through dedicated, scoped IAM roles, never shared accounts.
• Enforce strong password policies and MFA for every external account, without exceptions.
• Log and review supplier activity separately so misuse stands out quickly.

Source: Click to Read the original report (SecurityWeek)