Denmark Archives - Recon Bee

Denmark population registry data breach affects 8.8 million people

6Oct

By RBNo Comments

News

Denmark population registry data breach affects 8.8 million people

Denmark's Central Population Register (CPR) is warning of a data breach that compromised the personal information of approximately 8.8 million registered individuals. This includes both residents and those who have moved abroad; as well as the deceased. CPR is the national civil registry, containing personal information on residents, including names, addresses, dates of birth, marital status, and CPR identification numbers. According to a CPR announcement published earlier today, threat actors misused a private Danish company's legitimate access to the registry system to obtain names, addresses, CPR numbers, and other information relating to registered members. A separate announcement by the Danish Data Protection Agency says that the attack involved some form of brute-forcing...

Denmark orders schools to stop sending student data to Google

In response to student data being sent to Google through the usage of Chromebooks and Google Workspace services in Danish schools, the data protection authorities (Datatilsynet) has filed an injunction. About four years ago, concerned parent and activist Jesper Graugaard drew the issue to the agency's notice by protesting the way student data is provided to Google without any thought given to how it can be misused or what effect it might have on those individuals in the future. The agency has now determined that there is no legal basis for all revealed purposes for the existing ways of transmitting personal data to Google. 53 municipalities in Denmark therefore need to modify their data processing procedures read more Denmark orders schools to stop sending student data to Google. ...

New Findings Challenge Attribution in Denmark’s Energy Sector Cyberattacks

Recent research from Forescout suggests that the Russia-affiliated Sandworm hacking gang may not have been involved in the cyberattacks that targeted Denmark's energy industry last year. Targeting approximately 22 Danish energy organizations, the intrusions happened in two separate waves in May 2023. The first wave took advantage of a Zyxel firewall security flaw (CVE-2023-28771), and the second activity cluster saw the attackers install Mirai botnet variants on infected hosts through an as-yet-unknown initial access vector. May 11 was the first wave, and May 22 to May 31, 2023 was the second wave. In one such attack that was discovered on May 24, it was noted that the compromised machine was in communication with IP addresses that had previously acted as command-and-control (C2) re...