Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

17 clusters · 157 sources · 56 days · First seen 2 months ago · Last updated 6 days ago

Cyberattacks targeting Polish infrastructure and services

Overview

Poland has faced a series of cyberattacks targeting critical infrastructure and digital services. In late July 2026, the Central Office for Combating Cybercrime (CBZC) confirmed that Russian citizens breached a hospital building-management system in Sanok. By August 10, 2026, the scale of digital threats expanded to include social security and large-scale medical data. A volumetric DDoS attack targeted the Social Insurance Institution (ZUS), while the medical documentation platform MyDr reported potential unauthorized access. Hackers claimed to have stolen approximately 18.8 million unique PESEL numbers, along with medical histories and prescription data. On August 12, 2026, Deputy Prime Minister Krzysztof Gawkowski confirmed the MyDr breach potentially affects nearly 19 million citizens and 12,000 medical facilities, describing it as one of the largest cybersecurity incidents in the country’s history. By early September 2026, the fallout continued as the Polish Medical Chamber (NIL) sought clarification from the Personal Data Protection Office (UODO) regarding GDPR reporting obligations. As of mid-September 2026, a large-scale notification process for affected patients has commenced via email, SMS, or mail. Reports on September 12 indicated the leaked data may include information belonging to employees of the Ministry of National Defence and Polish soldiers. On September 18, 2026, further details emerged regarding the MyDr electronic medical documentation (EDM) system breach. Attackers reportedly gained access to an archival database copy from April 12, 2024. Compromised information includes names, PESEL numbers, residential addresses, contact details, health status, and medical leaves. By September 20, 2026, the breach prompted a surge in citizens attempting to secure their PESEL identifiers, with notable queues reported in cities like Łódź and Lublin. The UODO has launched an inspection into MyDr to evaluate security measures.

Entities

MyDr · Ministry of Digital Affairs · Krzysztof Gawkowski · Poland · Personal Data Protection Office

Claims

What the coverage asserts, and how many sources carry each claim.

[● 33 SOURCES] The cyberattack targeted the systems of MyDr, a provider of electronic medical documentation software.
[● 32 SOURCES] Approximately 19 million Polish citizens had their personal and medical data leaked.
[● 24 SOURCES] The cyberattack is one of the largest cybersecurity incidents in Poland's history.
[● 21 SOURCES] The stolen data totals approximately two terabytes.
[● 21 SOURCES] A mechanism has been established for citizens to check if their data was stolen.
[● 14 SOURCES] The breach targeted a medical software provider used by approximately 12,000 medical facilities.
[● 14 SOURCES] There is currently no evidence that the attack originated from a foreign state, including Russia.
[● 10 SOURCES] The attack is believed to be motivated by financial gain from cybercriminals.
[● 10 SOURCES] Poland will not pay any ransoms to the attackers.

Timeline

6 days ago

[BUSINESS] 6 sources
MyDr medical data breach leads to first compensation claim in Poland
A Polish man is seeking 30,000 PLN in damages following a massive MyDr medical data breach that potentially compromised the sensitive information of 19 million people.
6 days ago

[TECHNOLOGY] 9 sources
Poland faces major data breach and rising cyber threats
A major data breach at MyDr may affect 18.8 million Polish citizens, prompting mass PESEL security requests. Authorities are also addressing rising smishing scams and updating anti-spoofing regulations.
8 days ago

[TECHNOLOGY] 5 sources
MyDr cyberattack threatens data of 19 million patients
A cyberattack on the MyDr medical documentation system has potentially exposed the personal and health data of nearly 19 million patients in Poland.
10 days ago

[TECHNOLOGY] 2 sources
MyDr cyberattack threatens data of 19 million Poles
A cyberattack on medical software provider MyDr has compromised the personal and health data of nearly 19 million people in Poland, including PESEL numbers and insurance details.
14 days ago

[TECHNOLOGY] 4 sources
MyDr cyberattack: Patients notified of massive data breach
Patients in Poland are being notified of a massive MyDr cyberattack that may have compromised the personal and health data of up to 18.8 million people across 12,000 medical facilities.
15 days ago

[TECHNOLOGY] 4 sources
Poland considers automatic PESEL reservation after massive data leak
Following a cyberattack on MyDr leaking data of 19 million Poles, the National Security Bureau has proposed making PESEL numbers automatically reserved to enhance citizen protection.
17 days ago

[TECHNOLOGY] 15 sources
MyDr cyberattack leaks medical data of up to 19 million people
A cyberattack on MyDr has leaked the medical and personal data of up to 19 million people in Poland. Officials warn against clicking links in suspicious SMS messages regarding the breach.
20 days ago

[TECHNOLOGY] 7 sources
Polish Medical Chamber seeks clarity on MyDr data breach obligations
The Polish Medical Chamber is seeking legal clarity on GDPR reporting duties following a MyDr system cyberattack, as patients begin receiving notifications regarding compromised medical data.
22 days ago

[TECHNOLOGY] 3 sources
Poland introduces ‘Cyber Piątka’ to enhance medical data security
Poland's Ministry of Digital Affairs has introduced the ‘Cyber Piątka’ package to bolster medical data security following a massive breach affecting 19 million citizens.
27 days ago

[TECHNOLOGY] 8 sources
MyDr data breach: Hackers threaten further attacks
Hackers behind the MyDr data breach claim more attacks are coming, while experts warn of increased phishing risks following the leak of Polish users' information.
about 1 month ago

[TECHNOLOGY] 15 sources
MyDr cyberattack leaks medical data of 19 million people
A cyberattack on medical platform MyDr has leaked sensitive data, including PESEL numbers and medical records, of approximately 19 million people in Poland. Investigations by cybercrime authorities are ongoing.
about 1 month ago

[TECHNOLOGY] 15 sources
Poland hit by massive medical data breach and AI disinformation
Poland faces a massive cyber crisis involving a data breach of 19 million medical records via MyDr software and a targeted disinformation campaign against Radio PiK using AI-generated content.
about 1 month ago

[TECHNOLOGY] 53 sources
MyDr healthcare software breach potentially exposes 18.8 million PESEL numbers
A cyberattack on healthcare software provider MyDr has potentially exposed the personal and medical data of 18.8 million people in Poland, prompting government warnings and security precautions.
about 1 month ago

[TECHNOLOGY] 12 sources
MyDr cyberattack potentially compromises data of 19 million people in Poland
A cyberattack on the MyDr platform has potentially exposed the medical and personal data of 19 million people in Poland, prompting a state-led investigation and preventive security updates.
about 2 months ago

[TECHNOLOGY] 65 sources
MyDr cyberattack leaks medical data of nearly 19 million Poles
A major cyberattack on medical software provider MyDr has leaked sensitive data of nearly 19 million Poles, including PESEL numbers and medical records, prompting urgent government warnings to freeze PESEL IDs.
about 2 months ago

[TECHNOLOGY] 11 sources
Cyberattacks hit Poland's ZUS and medical platform MyDr
Poland faces major cyber threats following a DDoS attack on the ZUS social insurance system and a potential massive data breach at medical platform MyDr, involving millions of patient records.
2 months ago

[TECHNOLOGY] 5 sources
Russian hackers breach ventilation control of Polish hospital, CBZC confirms
CBZC confirmed Russian hackers accessed a Sanok hospital's ventilation system, raising temperature to 28 °C. No damage occurred, but the breach underscores hospital infrastructure cyber‑vulnerabilities.

Sources

aestatistica.com.br · agerpres.ro · ajour.se · alla.se · allgaeuhit.de · angora24.pl · armwrestlingworldchampionship.org · bezprawnik.pl · bizblog.spidersweb.pl · biznes.autokult.pl · biznes.interia.pl · biznesalert.pl · biznesinfo.pl · blog-daneosobowe.pl · brandsit.pl · brasilemfolhas.com.br · buddhistlibrary.org.au · cba.gov.pl · chojnice24.pl · cozadzien.pl · crn.pl · de.euronews.com · dobreprogramy.pl · dorzeczy.pl · dumanowski.natemat.pl · dziennik-polityczny.com · dziennik.pl · dziennik.walbrzych.pl · dzienniknarodowy.pl · e.sport.interia.pl · edziecko.pl · efakt.pl · efsyn.gr · eltiempomx.com · epoznan.pl · ertnews.gr · europesays.com · everyfutbol.co · eyehealthweb.com · finanse.wp.pl · fritidsgardar.se · gazeta-lokalna.pl · gazetaprawna.pl · gmina.wloclawek.pl · gospodarka.gazeta.pl · gostynska.pl · gportfolio.hu · greensavers.sapo.pt

This summary has been updated 29 times: see revision history