Government · Denmark · 3 min read
Denmark: 8.8 million people exposed by a vendor password of '123456'
8.8M
people's records accessed
A supplier with access to the national population register used one of the weakest passwords in the world.
How they got in
A vendor account protected by the password '123456'.
The damage
Records of about 8.8 million people accessed.
Board takeaway
Your suppliers' passwords are your passwords. Require multi-factor sign-in for every vendor account.
What to do this week
- List every outside company with a login to your systems.
- Turn on multi-factor sign-in for all of them.
- Remove vendor accounts nobody has used in 90 days.
Next breakdown
Supermarket freezers hacked: tens of millions of euros of food thrown away →