{
  "type": "bundle",
  "id": "bundle--4f9f0b6a-277e-5ad5-8146-4de297849820",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--30912123-6795-56fc-8fdf-8bdaa567c70c",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "org:a9efe577-99f7-496b-9b86-8da38dc98f42",
      "name": "CPR administration",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--58542bfd-81a6-5c50-8850-3a65affb0af0",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "brh:c6b7fe3e-a6e6-4652-9b87-c8a1b2ab31c3",
      "name": "Denmark CPR registry unauthorized access"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e1b05d54-fd10-533f-8ee4-c5dc75738ebd",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "inc:bf578ed8-9352-496d-be5a-42c5adf9420f",
      "name": "Denmark CPR registry unauthorized access"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--01390d22-b2e1-5e59-8d72-745e2586cc81",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:8d775d7d-602c-4055-bf71-0041b70c5e83",
      "relationship_type": "affected-organization",
      "source_ref": "incident--e1b05d54-fd10-533f-8ee4-c5dc75738ebd",
      "target_ref": "identity--30912123-6795-56fc-8fdf-8bdaa567c70c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CPR administration",
          "url": "https://www.cpr.dk/cpr-nyt/nyhedsarkiv/2026/okt/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger",
          "external_id": "cit:1e4a2798-41c0-4f6c-a117-1c2586cf4012",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6bff8fe628e60c288e1387e5385842029999b22261ee491a32cf5201d56d55bf"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0d730d99-5c3c-5b10-8057-e52083891bd2",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:09576ffd-a1ad-4f06-8596-3c405a3d0661",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e1b05d54-fd10-533f-8ee4-c5dc75738ebd",
      "target_ref": "x-ally-event--204e6e83-5cc4-5a19-874e-41692bbf210a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Research, Education and Digitalisation",
          "url": "https://fudm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/",
          "external_id": "cit:ca8d5774-991a-425d-a0dc-812bf9fb2287",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd5e1d47b591b426a6860cb91e8d5c443b651b178258165aec57a566f45a6252"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--404f47fd-e973-534d-86a7-954afa0bf91d",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:10d8457b-af9a-40a0-820a-d7f711f29bde",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e1b05d54-fd10-533f-8ee4-c5dc75738ebd",
      "target_ref": "x-ally-event--747eee31-1328-5e80-8d8e-b47be846568e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Resilience and Preparedness",
          "url": "https://mssb.dk/nyheder/nyhedsarkiv/2026/oktober/minister-indkalder-partier-til-at-droefte-sag-om-kompromittering-af-cpr-registret/",
          "external_id": "cit:123a0108-9a1d-4203-b0bc-badc8480d295",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d7fafba8f982bfdba34c4ac3ff38d567d61096263b40775f52a11c2e1e5b8c9"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ac75e432-7018-5c5e-819c-45d0fc1fc978",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:989a1eba-e46e-44ec-83c4-17c42ca47be3",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e1b05d54-fd10-533f-8ee4-c5dc75738ebd",
      "target_ref": "x-ally-event--19756d45-c2c0-5cc3-80fb-56fd88c934ce",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Research, Education and Digitalisation",
          "url": "https://fudm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/",
          "external_id": "cit:fb9d3cdd-f1d4-4f52-a66b-aafd74e968f3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd5e1d47b591b426a6860cb91e8d5c443b651b178258165aec57a566f45a6252"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0205bccb-517c-58a3-8f3a-0dd9ef7e9e9d",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:5a1054d3-6612-476e-bfb4-999eec3b1231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Research, Education and Digitalisation",
          "url": "https://fudm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/",
          "external_id": "cit:7fe6cb97-0825-45fc-a18c-a70024a3abde",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd5e1d47b591b426a6860cb91e8d5c443b651b178258165aec57a566f45a6252"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 8800000,
        "unit": "individual",
        "approximate": true
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--057c2955-29a5-57f1-88c3-847eaab4c236",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:7bb3730f-a7af-4f3e-a4eb-3217e4d8a60c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Research, Education and Digitalisation",
          "url": "https://fudm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/",
          "external_id": "cit:129924b2-4c00-4c53-8599-f2b49e74148e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd5e1d47b591b426a6860cb91e8d5c443b651b178258165aec57a566f45a6252"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-02"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--07ef40bd-440d-5f0c-8d93-cd116574326c",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:ab99a4dc-6e4d-47e9-a69c-395dde70a5a3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Resilience and Preparedness",
          "url": "https://mssb.dk/nyheder/nyhedsarkiv/2026/oktober/minister-indkalder-partier-til-at-droefte-sag-om-kompromittering-af-cpr-registret/",
          "external_id": "cit:320efe04-209e-4bb5-983c-ea91467952ee",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d7fafba8f982bfdba34c4ac3ff38d567d61096263b40775f52a11c2e1e5b8c9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-07"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1c0de72e-e82e-5f3b-860c-deac832ecc20",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:3fdbdb82-d9fb-4a37-ab33-dbc6a3edf479",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CPR administration",
          "url": "https://www.cpr.dk/cpr-nyt/nyhedsarkiv/2026/okt/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger",
          "external_id": "cit:4b753166-421d-4326-b1f8-0f2c915c55ab",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6bff8fe628e60c288e1387e5385842029999b22261ee491a32cf5201d56d55bf"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The government said protected registrants’ names and addresses were excluded from unauthorized access; this does not establish that every field for those people was excluded."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--36410d47-0e97-56f4-8b92-a67cfcdee7b3",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:fee477fc-9a4c-4b93-b23e-6d5faed8aa08",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Research, Education and Digitalisation",
          "url": "https://fudm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/",
          "external_id": "cit:fb5b153f-d4ef-4e20-9f1f-ae292c42e029",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd5e1d47b591b426a6860cb91e8d5c443b651b178258165aec57a566f45a6252"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CPR administration stopped the company’s access and notified the data-protection authority; police investigated and the ministry ordered a security review."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4ef42447-3dc4-5f85-807c-a158a0516ea7",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:a55bc6a3-3434-4acf-9658-a9ea3d92b63a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Resilience and Preparedness",
          "url": "https://mssb.dk/nyheder/nyhedsarkiv/2026/oktober/minister-indkalder-partier-til-at-droefte-sag-om-kompromittering-af-cpr-registret/",
          "external_id": "cit:2e65df1a-b2f2-4179-86de-36ad2224d4c2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d7fafba8f982bfdba34c4ac3ff38d567d61096263b40775f52a11c2e1e5b8c9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The preparedness minister convened political parties to discuss possible policy responses."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7305495e-bfd4-5401-883d-951b04815d0a",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:57c41fa4-fcdb-4ec4-91a3-1a3ddeb88804",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Research, Education and Digitalisation",
          "url": "https://fudm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/",
          "external_id": "cit:8119b878-43fe-4e01-8f31-b2dccffea6ad",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd5e1d47b591b426a6860cb91e8d5c443b651b178258165aec57a566f45a6252"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CPR administration became aware of irregular September lookup activity."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--abb0ba28-4224-5235-8e2f-8e5db378519c",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:af0ad5b5-dc6f-4a6e-89f5-22ea5bec512a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Research, Education and Digitalisation",
          "url": "https://fudm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/",
          "external_id": "cit:19d4f7f6-f3a8-43f5-b415-0f23559161dd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd5e1d47b591b426a6860cb91e8d5c443b651b178258165aec57a566f45a6252"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-02"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bee24d8a-4481-50b6-80fd-4273bc29ab58",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:38e05fdd-9fce-480c-83c3-2353f4b7c569",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Research, Education and Digitalisation",
          "url": "https://fudm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/",
          "external_id": "cit:ea794966-512b-4ece-bebf-581f5f3c5d27",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd5e1d47b591b426a6860cb91e8d5c443b651b178258165aec57a566f45a6252"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-05"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cfe595fc-e6b2-5c56-80b7-85751c488cc3",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:bed74026-c044-46c5-a8ae-2316da8cdded",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Danish Ministry of Research, Education and Digitalisation",
          "url": "https://fudm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/",
          "external_id": "cit:c1e17b30-7ad9-4554-8475-bf5516f153d8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd5e1d47b591b426a6860cb91e8d5c443b651b178258165aec57a566f45a6252"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The ministry and CPR administration disclosed the unauthorized access."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d9533a2e-24f2-5109-8670-fbb7587421bc",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:2eed353d-695c-443a-a3af-42526c5c1acb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CPR administration",
          "url": "https://www.cpr.dk/cpr-nyt/nyhedsarkiv/2026/okt/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger",
          "external_id": "cit:667902e3-895a-49d0-bce7-b0cb0971dea5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6bff8fe628e60c288e1387e5385842029999b22261ee491a32cf5201d56d55bf"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "An unauthorized party abused an unnamed Danish company’s legitimate CPR lookup access to obtain registered persons’ names, addresses and CPR identifiers."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--19756d45-c2c0-5cc3-80fb-56fd88c934ce",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "evt:b73259b8-0104-4cd1-a883-be34f0e3bb11",
      "name": "Public disclosure"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--204e6e83-5cc4-5a19-874e-41692bbf210a",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "evt:3c567009-ba0d-4569-ab70-bceaac1b9732",
      "name": "Irregular access detected"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--747eee31-1328-5e80-8d8e-b47be846568e",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "evt:977663ae-ead6-4428-9084-445c1c8d586b",
      "name": "Policy discussions announced"
    }
  ]
}
