The security failure was detected only after Pays ApS received an unusually large invoice for the volume of database queries performed. The contractor had legitimate access to the registry, which serves as the primary population and identity database for the state.
