Hacker claims that he used the password that security researchers have been warning internet users to stop using since over five years to hack into Denmark’s national registry

A hacker has reportedly claimed responsibility for breaching Denmark’s national identity database saying that the massive intrusion was carried out using the ‘most insecure password’ for the last six years: “123456.” The breach compromised Denmark’s Central Register of Persons (CPR), exposing records connected to approximately 8.8 million people. Speaking to Danish newspaper Politiken, the alleged hacker claimed they gained entry via an external IT contractor’s legitimate corporate account secured by this sequence. The publication reported that at least three accounts belonging to the firm, including an administrator account, relied on the exact same numerical string. The individual told the outlet (via The Register) that they have no intention of leaking or selling the accessed citizen information.