Cyberattacks hit Poland's ZUS and medical platform MyDr

Poland has experienced two significant cyber incidents on August 10, 2026, targeting the Social Insurance Institution (ZUS) and the medical platform MyDr.

ZUS was targeted by a volumetric DDoS attack that paralyzed its website and the PUE/eZUS platform for approximately three hours. The attack aimed to overload network resources, preventing citizens from accessing essential services such as social security benefits and medical certificates. Services were restored by midday.

Simultaneously, MyDr, a major provider of Electronic Medical Documentation used by thousands of healthcare facilities, reported a potential unauthorized access to its systems. While the Ministry of Digitalization has not yet confirmed a full-scale data leak, hackers claim to have stolen approximately 18.8 million unique PESEL numbers, along with medical histories and prescription data. The platform, which is part of the ZnanyLekarz group owned by DocPlanner, processes millions of visits and prescriptions monthly. Authorities and cybersecurity services are currently investigating the extent of the breach and the identity of the perpetrators.