I see this as a good thing. It means that we'll (hopefully) get stricter security revolving around using these numbers. It'll no longer be enough just to yap out a 10 digit number to "verify" you are who you say you are. We already have a (albeit heavily critiqued) national 2FA system in place (MitID).

We'll have to start treating the CPR number as just a username, instead of a password. It should never have been "secret" in the first place.

Totally agree, and I am unsure why it has not happened after the last breach we had, was it 8 years ago? I dont see this breach as any significance as I thought it was all breached anyway earlier.

Any agree, it should be only a username and MitID is the verifier(password) and without both, it should simply be impossible to create any kind of binding contracts like loans etc. anything else is simply sloppy policy from the government. but again no politician understands IT, neither does the majority in EU about the implications of chat control...

What you write is correct, but it wouldnt make any difference in this case. The information would have been leaked anyway.

It will take a whole new approach to confidential information to really make a difference. I think we need to go the SSI way, and I think at some point we will.