Denmark’s national identity database has faced a major security breach, compromising 8.8 million records due to a password vulnerability (‘123456’) exploited by a third-party contractor’s account. The breach went unnoticed for almost two weeks, prompting serious worries about data protection. Danish officials confirmed the incident after detecting an abnormal number of queries. In response, Pays ApS, the contractor involved, has taken its website offline.