MyDr medical data breach leads to first compensation claim in Poland

A resident of Kostrzyn nad Odrą has filed a claim for 30,000 PLN in damages following a massive medical data breach involving the private company MyDr. The breach, which occurred in the first half of August 2026, compromised sensitive information including diagnoses, prescriptions, appointment schedules, personal data, addresses, and PESEL numbers.

The leak has potentially affected 19 million people in Poland. The Ministry of Digital Affairs and the Joint Cybersecurity Operations Center have been involved in investigating the incident. The claimant, who was notified of the leak a month after it occurred, has officially requested compensation for the loss of control over his personal data and the resulting sense of threat. He has stated that if the demand is not met within 14 days, he will pursue the matter in court.