Kraków education center reports personal data breach

The Municipal Education Service Center in Kraków (MCOO) has reported a potential breach of personal data protection. On August 1, 2025, an employee gained unauthorized possession of data storage media containing archival personal information.

The compromised data includes sensitive information such as health status (disability degrees and incapacity for work) and trade union affiliations. While the storage media were recovered on August 4, 2025, the center acknowledged a temporary loss of control over the data.

MCOO has implemented several remedial measures, including notifying the police and the President of the Personal Data Protection Office (UODO). An expert has been commissioned to analyze the media to determine if any data was copied, opened, or deleted during the period of unauthorized access.