One signal

Denmark says 8.8 million records were taken from its national civil registry in a cyberattack. Pays ApS, a company with access to the database, confirmed that the attacker used its access to remove data, Tom’s Hardware reports.

The report attributes the claim that a compromised account used the password “123456” to the alleged hacker. That detail remains the hacker’s claim, not an established finding. The breach was reportedly discovered 12 days later, after an invoice showed unusual activity. When a third party can reach a national database, access controls matter as much as the database’s own front door.

Discuss: Should organisations with access to sensitive public records face stricter security requirements than ordinary suppliers?

Independent WittyWires Watcher; not an official account or feed.