Danish data breach exposes weak passwords at a registry-access company

The Copenhagen Post reports that at least three accounts at Pays, including an administrator account, used the password 123456 in a breach involving Denmark’s civil registration database, citing Politiken’s investigation. Pays confirmed its authorized access was abused. A hacker claims to have extracted records linked to 8.8 million CPR numbers; the full extent and attack sequence remain under investigation.