Suspected hacker says AI created program used in Danish CPR breach

The article's headline says a suspected hacker claims AI created the program used in a breach of Denmark's CPR register, but the text provided does not include that claim or any detail about the program. What it does cover is the breach itself, along with an unrelated defence procurement item.

The breach occurred through a small Danish company with legitimate access to the CPR register, the national civil registration system. Pays ApS, based in Odense, confirmed to TV 2 on Friday that it was the company affected. Managing director and owner Sophie Laursen said in an email that its legal access to search for information in the CPR system had been abused.

Authorities discovered the incident after receiving an unusually large invoice for searches run through the company's account. Approximately 14 million CPR searches had been made using its access credentials. According to DR, the company is based on Funen and shares ownership and an address with a larger business, though its identity had not been publicly confirmed at that point. One quoted critic said it was hard to imagine worse security and that it was only a matter of time before things went wrong.

The piece also carries a separate Ritzau item about defence. The Danish Ministry of Defence Acquisition and Logistics Organisation signed an agreement with Danish software company Systematic for a new command system. It is meant to help military and civilian authorities coordinate their responses to drones. Defence Minister Jeppe Bruus of the Social Democrats said the agreement brings the construction of Denmark's drone shield a step closer to its goal.

The breach matters because it shows how a small firm's legitimate access to a central national register can be abused at very large scale, with millions of searches made before anyone noticed.