MyDr cyberattack leaks medical data of nearly 19 million Poles

cyberattack medical data breach PESEL theft MyDr cybersecurity

A massive cyberattack on MyDr, a medical software provider, has resulted in the theft of approximately two terabytes of sensitive data, potentially affecting nearly 19 million Polish citizens. The breach impacts roughly 12,000 medical facilities and includes highly sensitive information such as PESEL numbers, medical histories, prescriptions, and contact details.

Polish Digital Affairs Minister Krzysztof Gawkowski described the incident as one of the largest in the country's history. While the attack is believed to be motivated by financial gain from cybercriminals, authorities have stated there is currently no evidence of involvement by a foreign state, including Russia. The government has declared it will not pay any ransoms to the attackers.

To mitigate the risk of identity theft and financial fraud, the government is strongly urging citizens to freeze their PESEL numbers via the mObywatel app or official government portals. A mechanism has been established through the 'Bezpieczne Dane' service to allow individuals to check if their personal information was compromised. The incident has also raised concerns regarding the legal responsibility of medical clinics versus software processors in the event of such large-scale breaches.

Entities

CERT Polska · Centralne Biuro Zwalczania Cyberprzestępczości · DocPlanner · Donald Tusk · Krzysztof Gawkowski · Ministry of Digital Affairs · MyDr · Personal Data Protection Office · Play · Poland · UODO · Urząd Ochrony Danych Osobowych

Claims

What the coverage asserts, and how many sources carry each claim.

[● 10 SOURCES] The attack is believed to be motivated by financial gain from cybercriminals. www.efsyn.gr · www.ertnews.gr · www.koutipandoras.gr · www.newsbomb.gr · www.real.gr · +3 more
[● 14 SOURCES] The breach targeted a medical software provider used by approximately 12,000 medical facilities. www.efsyn.gr · www.ertnews.gr · www.koutipandoras.gr · www.newsbomb.gr · www.real.gr · +8 more
[● 24 SOURCES] The cyberattack is one of the largest cybersecurity incidents in Poland's history. www.efsyn.gr · www.ertnews.gr · www.koutipandoras.gr · www.newsbomb.gr · www.real.gr · +14 more
[● 21 SOURCES] The stolen data totals approximately two terabytes. www.efsyn.gr · www.ertnews.gr · www.koutipandoras.gr · www.newsbomb.gr · www.real.gr · +13 more
[● 21 SOURCES] A mechanism has been established for citizens to check if their data was stolen. www.efsyn.gr · www.ertnews.gr · www.koutipandoras.gr · www.newsbomb.gr · www.real.gr · +12 more
[● 10 SOURCES] Poland will not pay any ransoms to the attackers. www.efsyn.gr · www.ertnews.gr · www.koutipandoras.gr · www.newsbomb.gr · www.real.gr · +4 more
[● 14 SOURCES] There is currently no evidence that the attack originated from a foreign state, including Russia. www.efsyn.gr · www.ertnews.gr · www.koutipandoras.gr · www.newsbomb.gr · www.real.gr · +6 more
[● 32 SOURCES] Approximately 19 million Polish citizens had their personal and medical data leaked. www.efsyn.gr · www.ertnews.gr · www.koutipandoras.gr · www.newsbomb.gr · www.real.gr · +23 more
[● 33 SOURCES] The cyberattack targeted the systems of MyDr, a provider of electronic medical documentation software. prawy.pl · www.fakt.pl · itwiz.pl · misyjne.pl · biznes.interia.pl · +23 more
[● 12 SOURCES] The breach affected approximately 12,000 medical facilities. www.iefimerida.gr · misyjne.pl · prawy.pl · eltiempomx.com · polityka.co.pl · +6 more