started · updated
MyDr cyberattack leaks medical data of 19 million people in Poland
A major cyberattack on MyDr, a provider of electronic medical documentation systems, has resulted in the leak of sensitive data belonging to approximately 19 million people in Poland. The compromised information includes names, PESEL numbers, phone numbers, email addresses, health status, medical notes, and prescription details.
MyDr CEO Piotr Miluski issued a formal apology to patients and users, stating that the company is working with external experts to determine the exact scope of the incident. While the total number of affected individuals is cited at 19 million, the company noted that up to 18 million people may be notified as a precaution, particularly those whose historical data was present in the affected environment.
The Central Bureau for Combating Cybercrime is currently investigating the attack. Simultaneously, the Personal Data Protection Office (UODO) has launched an audit to examine MyDr’s technical and organizational security measures, including whether risk analyses and security tests were regularly conducted. In response to the breach, the Ministry of Digital Affairs has announced plans to introduce new regulations and technical safeguards to prevent similar future incidents.
Entities
Central Bureau for Combating Cybercrime · Ministry of Digital Affairs · MyDr · Personal Data Protection Office · Piotr Miluski
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 2 SOURCES] The leaked information includes names, PESEL numbers, phone numbers, email addresses, health status, medical notes, and prescription data. dorzeczy.pl · www.gazetaprawna.pl
- [● 3 SOURCES] A cyberattack on MyDr resulted in the leak of identification and medical data belonging to 19 million people. www.telko.in · dorzeczy.pl · www.gazetaprawna.pl
- [● 2 SOURCES] The incident may affect up to 18 million people, a figure determined cautiously to include anyone whose historical data was in the affected environment. dorzeczy.pl · www.gazetaprawna.pl
- [● 2 SOURCES] The platform serves 12,000 medical entities and processes 3 million visits and 2.7 million prescriptions monthly. dorzeczy.pl · www.gazetaprawna.pl
- [○ 1 SOURCE] The Ministry of Digital Affairs plans to introduce new regulations and technical solutions to prevent future cyber incidents. www.telko.in
- [○ 1 SOURCE] The Personal Data Protection Office is conducting an audit of MyDr's technical and organizational security measures. www.telko.in
- [● 2 SOURCES] MyDr CEO Piotr Miluski issued an apology to patients and users for the anxiety and uncertainty caused by the incident. dorzeczy.pl · www.gazetaprawna.pl
- [● 2 SOURCES] The Central Bureau for Combating Cybercrime is conducting an ongoing investigation into the attack. dorzeczy.pl · www.gazetaprawna.pl