Updated October 12, 2026.
On October 5, 2026, the Danish Ministry of Research, Education and Digitalisation announced a serious incident related to the CPR civil registration system. Unauthorized individuals exploited the legitimate lookup rights of a private company to access the names, addresses, CPR numbers, and other information of approximately 8.8 million people registered in the system.
This number includes individuals who have left Denmark and those who have passed away; it does not mean that 8.8 million people currently residing in Denmark are affected. The access rights of the involved company have been blocked. The police and authorities are still investigating the incident. Source: Danish Ministry of Research, Education and Digitalisation.
Should Vietnamese People Be Concerned?
Vietnamese individuals currently or formerly residing in Denmark and possessing a CPR number may be among those affected. It is not advisable to conclude at this time that a specific individual’s data has been used for fraudulent purposes. However, someone who knows your name, address, and CPR number could impersonate a bank or government agency more convincingly.
SIRI and Udlændingestyrelsen (the Danish Agency for International Recruitment and Integration and the Danish Agency for Immigration) have stated that users of their services may also be affected. When calling to inquire about your case, you may be asked additional questions to verify your identity. Source: New to Denmark.
Five Actions to Take to Reduce Risk
1. Be Cautious of Unexpected Calls, SMS, and Emails
Someone who correctly states your name, address, or CPR number is not necessarily a bank employee or government official. If they demand urgent action, end the conversation and find the contact number on the official website to call back. Source: Datatilsynet.
2. Do Not Click on Unexpected Links
Be especially vigilant about messages inviting you to “check your CPR” or “protect your MitID.” Always open the app yourself or type the official website address. Do not provide MitID confirmation codes, passwords, PINs, or card information to contacts via phone, text message, or email. Source: Sikkerdigital.
3. Monitor for Unrecognized Activities
Pay attention to debt collection letters, loans, contracts, transactions, or service registrations that you did not initiate. If you notice specific signs, immediately contact your bank or the relevant institution through official channels; if a crime has occurred, report it to the police. Source: Datatilsynet.
4. Consider Setting a Credit Warning (kreditadvarsel) if You Suspect Identity Theft for Loans
A kreditadvarsel (credit warning) is a flag in your CPR record that alerts businesses to be more cautious if someone applies for a loan or installment purchase using your identity. You can set or remove this flag yourself on borger.dk. This measure is voluntary, does not guarantee prevention of all fraud cases, and may make it more difficult for you yourself to apply for loans or installment purchases. Individuals setting the credit warning must be 15 years of age or older.
5. Check How You Are Using Your CPR Number for Logins
If you have used all or part of your CPR number as a username or password for a service, you should change your login information for that service. According to Datatilsynet, this CPR incident alone does not mean you must change all your passwords if you do not use your CPR number in the aforementioned way and have not received notification of a password breach in another incident. Source: Datatilsynet.
Understanding the Level of Risk
A CPR number does not, by itself, allow others to log into a bank account or transfer money; such operations typically require additional authentication steps like MitID. The notable risk at this time is that personal information could be used to create convincing-looking scams. The data incident also does not mean that the information of everyone whose data was accessed has been used to commit crimes. Source: Sikkerdigital on identity theft.
If you require guidance on preventing scams or setting a kreditadvarsel, you can contact the Cyberhotline for Digital Security: +45 33 37 00 37. Please continue to monitor announcements from Danish authorities as the investigation is ongoing. Source: Sikkerdigital.
AVIDE compiles information from official authorities to support the Vietnamese community. This article reflects the situation at the time of update and will require adjustments if new findings are announced by the authorities.