Poland faces wave of cyberattacks on finance, healthcare, and education

Poland is experiencing a wave of significant cyberattacks targeting various sectors, including finance, healthcare, and education.

Fakturownia.pl, a major online invoicing and accounting provider, suffered a breach where an attacker known as ‘Fingerprint’ reportedly accessed user data, including account details, bank account numbers, and invoices issued before 2023. The company confirmed the incident and advised users to change passwords immediately. Deputy Prime Minister and Minister of Digital Affairs Krzysztof Gawkowski confirmed the incident and stated that authorities are working to identify the perpetrators.

The healthcare sector has also been targeted. ENEL-MED reported a cybersecurity incident where unauthorized access was gained to approximately 3% of its patient database. This follows previous attacks on medical entities like MyDr and Medyc. NASK is currently analyzing these incidents, noting the high vulnerability of the medical sector due to the sensitive nature of the data stored.

In the education sector, the Państwowa Uczelnia Zawodowa in Suwałki was hit by a ransomware attack that encrypted its server infrastructure, including backups. The university warned that personal data such as PESEL numbers, addresses, and bank details may have been compromised and advised students to secure their identities.