Kraków Education Center reports personal data breach

The Municipal Education Service Center in Kraków (MCOO) has reported a potential personal data breach. On August 1, 2025, an employee gained unauthorized possession of data storage media containing archival personal information. The compromised data includes sensitive details such as health status, disability degrees, incapacity for work, and trade union membership.

The storage media were recovered on August 4, 2025, after a period of lost control. MCOO has notified the police and the President of the Personal Data Protection Office (UODO). To mitigate risks, the center has implemented security training for staff and commissioned an expert to analyze whether the data was copied, opened, or deleted during the period of unauthorized access.

Potential consequences for affected individuals include risks to reputation, credibility, and the possibility of discrimination or identity theft. Experts recommend that individuals notified of such breaches should monitor for suspicious communications, change passwords, and consider securing their PESEL numbers.