started · updated
Poland medical data breaches affect millions of citizens
Poland is facing a series of significant medical data breaches affecting millions of citizens. A major investigation has been launched into a 2024 incident involving the eWUŚ system. While the National Health Fund (NFZ) estimated that approximately 11.1 million people were affected, the Poznań Regional Prosecutor's Office stated that over 13 million individuals had their personal data, including names and PESEL numbers, potentially compromised through unauthorized queries.
An indictment has been filed against five men in connection with the eWUŚ breach. The investigation revealed that the suspects used compromised accounts from two medical entities to send massive automated queries via the MyDr platform.
In a separate recent incident, the software provider IQ Dental reported a security breach occurring on October 1. This attack involved unauthorized access to an administrative account, allowing for API queries that potentially exposed the names, PESEL numbers, and visit details of patients across 36 dental clinics.
These events follow other notable breaches involving medical software providers like MyDr, Medyc, and Enel-Med, highlighting a recurring pattern of cyberattacks targeting the Polish healthcare sector.
Entities
IQ Dental · MyDr · National Health Fund · Personal Data Protection Office · Poznań · Poznań Regional Prosecutor's Office · eWUŚ
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] The NFZ clarified that the eWUŚ data leak did not involve a direct breach of NFZ's own infrastructure. next.gazeta.pl · www.medonet.pl
- [● 3 SOURCES] The NFZ reported that a data breach involving the eWUŚ system potentially affected approximately 11.1 million people. next.gazeta.pl · www.telepolis.pl
- [● 3 SOURCES] The IQ Dental breach occurred via unauthorized access to an administrative account on October 1. zdrowie.co.pl · www.tabletowo.pl · niebezpiecznik.pl
- [● 3 SOURCES] Potentially stolen data from the IQ Dental incident includes names, PESEL numbers, and addresses. zdrowie.co.pl · www.tabletowo.pl · niebezpiecznik.pl
- [● 3 SOURCES] An indictment has been sent to the District Court in Poznań against five men involved in the eWUŚ data breach. next.gazeta.pl · www.telepolis.pl
- [● 4 SOURCES] The MyDr software company suffered a security breach that potentially exposed patient data. moj.powiat.pl · kutno.net.pl · www.medonet.pl
- [● 2 SOURCES] The prosecutor's office determined that personal data of over 13 million people was obtained through the eWUŚ system. next.gazeta.pl
- [● 3 SOURCES] IQ Dental reported a security incident affecting 36 dental clinics. zdrowie.co.pl · www.tabletowo.pl · niebezpiecznik.pl