Denmark registry breach via 123456

    von Kelsey7f: Denmark

    Danish authorities flagged the breach after spotting unusually high activity on an account at Haynes APS, a small IT firm with legitimate access to the national population registry. That single admin account was protected by the password 123456, letting a hacker pull records for 8.8 million people. The exposed data covers names, addresses, and ID numbers for both living and deceased individuals. It is scary to think how many of these vulnerabilities are just human errors like this one. While guessing that password doesn't require crazy technology, the speaker wonders if the attacker used other tools to find the entry point in the first place. M&M News #Denmark

    Transkript (en)

    A hacker used the password 123456 to access Denmark's National Population Registry through an IT company account. Haynes APS is a small Danish firm with legitimate access. It had multiple accounts, including an admin one using that password. Records of 8.8 million people, names, addresses, and ID numbers for both living and deceased were exposed. Danish authorities confirmed the breach after detecting unusually high activity on the account. Well, that's tough. We need like a donkey of the day alert. That's not a good one there. I wonder, you know, obviously this isn't requiring some crazy technology to figure out the password itself. but to get to the point to where he understood where to go and how to get through and stuff like that maybe he was using some other tools I'm curious if that played any role in this at all or is he really just not paying enough attention and using a silly password that's yeah I think that's a big deal that a lot of people aren't considering is how many of these errors and vulnerabilities will just simply be human right like that's a Yeah, it's scary to think about how many people that could affect, right? The entertainment said the password is password. I'm sure there's a lot of people that fall into that. Yeah, totally, man. Elon Musk. Apparently, Amazon blocked GrokBoss from ordering and handling returns on site. We talk about how the internet is messing with all of us all the time. So if you're into that kind of thing, definitely hit follow.