MyDr cyberattack: Patients notified of massive data breach

Following a cyberattack on the MyDr software systems in August, a large-scale notification process for affected patients has begun. According to the Ministry of Digital Affairs, the unauthorized access could potentially involve historical data belonging to up to 18.8 million people and more than 12,000 medical facilities in Poland.

Patients are now receiving detailed notifications via email, SMS, or potentially mail. These messages specify which particular medical clinic or facility was involved in the breach. The compromised data, which dates back to April 2024, may include sensitive information such as names, residential addresses, phone numbers, email addresses, PESEL numbers, health data, and social insurance details.