[REVISION HISTORY]

Cyberattacks targeting Polish infrastructure and services

Updated 29 times since CLSTR started tracking revisions of this situation.

What changed

2026-09-21 05:20 UTC → 2026-09-22 08:12 UTC · added ~~removed~~

Poland has faced a series of cyberattacks targeting critical infrastructure and digital services. In late July 2026, the Central Office for Combating Cybercrime (CBZC) confirmed that Russian citizens breached a hospital building-management system in Sanok. By August 10, 2026, the scale of digital threats expanded to include social security and large-scale medical data. A volumetric DDoS attack targeted the Social Insurance Institution (ZUS), while the medical documentation platform MyDr reported potential unauthorized access. Hackers claimed to have stolen approximately 18.8 million unique PESEL numbers, along with medical histories and prescription data. On August 12, 2026, Deputy Prime Minister Krzysztof Gawkowski confirmed the MyDr breach potentially affects nearly 19 million citizens and 12,000 medical facilities, describing it as one of the largest cybersecurity incidents in the country’s history. By early September 2026, the fallout continued as the Polish Medical Chamber (NIL) sought clarification from the Personal Data Protection Office (UODO) regarding GDPR reporting obligations. As of mid-September 2026, a large-scale notification process for affected patients has commenced via email, SMS, or mail. Reports on September 12 indicated the leaked data may include information belonging to employees of the Ministry of National Defence and Polish soldiers. On September 18, 2026, further details emerged regarding the MyDr electronic medical documentation (EDM) system breach. Attackers reportedly gained access to an archival database copy from April 12, 2024. Compromised information includes names, PESEL numbers, residential addresses, contact details, health status, and medical leaves. By September 20, 2026, the breach prompted a surge in citizens attempting to secure their PESEL ~~identifiers. On September 21, 2026, the legal consequences of the~~ identifiers, with notable queues reported in cities like Łódź and Lublin. The UODO has launched an inspection into MyDr ~~breach began~~ to ~~manifest as a resident of Kostrzyn nad Odrą filed a claim for 30,000 PLN in damages.~~ evaluate security measures.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.