Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
7 clusters · 54 sources · 42 days · First seen · Last updated
Escalating cyberattacks on Polish healthcare and digitals
Overview
Poland’s healthcare and digital infrastructure continue to face severe cyberattacks. Following breaches at MyDr, Medyc, and an addiction treatment facility in Inowrocław, the scope of the crisis has expanded significantly. On September 29, 2026, a wave of attacks hit multiple sectors. Fakturownia.pl, an online invoicing provider, suffered a breach by an attacker known as ‘Fingerprint’ who accessed account details and bank numbers. Simultaneously, the Państwowa Uczelnia Zawodowa in Suwałki experienced a ransomware attack that encrypted server infrastructure, potentially compromising student PESEL numbers and bank details. In the medical sector, Enel-Med confirmed unauthorized access to approximately 3 percent of its patient database. By October 1, 2026, a hacking group known as Horus claimed responsibility for breaching the FELG Dent system, which serves roughly 16,000 dental practices. This breach may have compromised approximately 2 million patient records, including names, addresses, prescriptions, and e-ZLA documents. The attackers have threatened to leak sensitive data regarding doctors and psychotropic prescriptions unless a ransom is paid. On October 7, 2026, legal proceedings advanced regarding a separate massive breach involving the Polish National Health Fund (NFZ). An indictment was sent to the District Court in Poznań concerning a March 2024 incident where unauthorized access was gained to the eWUŚ system via legitimate employee accounts. While the NFZ estimated approximately 11.1 million people were affected, the Poznań Regional Prosecutor's Office stated that over 13 million individuals had personal data, including names and PESEL numbers, potentially compromised. An indictment has been filed against five men for using compromised accounts from two medical entities to send automated queries via the MyDr platform. Additionally, software provider IQ Dental reported a breach on October 1, where unauthorized API queries potentially exposed patient names, PESEL numbers, and visit details across 36 dental clinics.
Entities
Krzysztof Gawkowski · Poland · MyDr · Inowrocław · enel-med
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 4 SOURCES] The breach occurred on August 22 and 23, 2026.
- [● 4 SOURCES] The incident was detected on the night of September 8 and 9, 2026.
- [● 4 SOURCES] Hackers claim to have stolen data for 5 million people and 8 million private photos.
- [○ 1 SOURCE] The attackers claim to possess data for 5 million people and 8 million medical images.
- [○ 1 SOURCE] A cyberattack on the MyDr system resulted in the leak of data belonging to approximately 19 million Polish citizens.
- [● 10 SOURCES] Qbusoft is the producer of the Medyc software.
- [● 8 SOURCES] The Central Bureau for Combating Cybercrime is investigating the incident.
- [● 8 SOURCES] Minister of Digital Affairs Krzysztof Gawkowski promised strict consequences for private companies that violate security procedures.
- [● 7 SOURCES] The attack utilized a SQL injection vulnerability in the Medyc software interface.
- [● 6 SOURCES] Qbusoft failed to report the cyberattack to CERT Polska or the CSIRT CeZ team.
Timeline
-
[TECHNOLOGY] 5 sourcesPoland to publicly name companies negligent in cybersecurity
Polish officials plan to publicly name companies negligent in cybersecurity, while experts warn that paying ransomware ransoms does not guarantee data recovery.
-
[TECHNOLOGY] 9 sourcesPoland medical data breaches affect millions of citizens
Multiple cyberattacks in Poland have compromised the medical and personal data of millions, including a major eWUŚ system breach affecting up to 13 million people and a recent attack on IQ Dental clinics.
-
[TECHNOLOGY] 14 sourcesPoland faces major cyberattacks on medical and digital systems
Poland faces major cyberattacks, including a breach of the FELG Dent system affecting 2 million patient records and a massive MyDr leak involving 19 million citizens, prompting widespread PESEL reservations.
-
[TECHNOLOGY] 14 sourcesPoland faces wave of cyberattacks on finance, healthcare, and education
Poland faces multiple major cyberattacks, including a data breach at Fakturownia.pl, a ransomware attack on a university in Suwałki, and unauthorized access to patient data at ENEL-MED.
-
[TECHNOLOGY] 8 sourcesPoland healthcare sector faces multiple medical data breaches
Multiple cyberattacks in Poland have targeted medical databases, including Enel-Med and Medyc, risking the exposure of sensitive patient data and increasing the potential for blackmail and identity theft.
-
[TECHNOLOGY] 18 sourcesQbusoft Medyc software breach exposes Polish patient data
A cyberattack on Qbusoft's Medyc software has potentially exposed the medical data of millions of Polish citizens, involving sensitive information like PESEL numbers and medical records.
-
[INTERNATIONAL] 7 sourcesPoland faces MyDr data breach and identity verification deadlines
A massive data breach at MyDr potentially affects 18.8 million people in Poland, while Ukrainian refugees face a deadline to confirm identities to maintain social benefits.
Sources
biznes.interia.pl · biznesinfo.pl · crn.pl · cyberdefence24.pl · dlaszpitali.pl · dobreprogramy.pl · donald.pl · dziennik-polityczny.com · dziennik.pl · dzienniknarodowy.pl · fakt.pl · forsal.pl · gazeta-lokalna.pl · gazetaprawna.pl · geekweek.interia.pl · gospodarka.gazeta.pl · innpoland.pl · ino.online · instalki.pl · isportal.pl · itreseller.pl · kutno.net.pl · medonet.pl · moj.powiat.pl · morningstar.be · moto.egospodarka.pl · nasza-holandia.pl · naszbiznes24.pl · newsroom.salon24.pl · next.gazeta.pl · niebezpiecznik.pl · niezalezna.pl · osnews.pl · pcformat.pl · polityka.co.pl · polsatnews.pl · portalspozywczy.pl · rmf24.pl · rynekzdrowia.pl · see.mv · spidersweb.pl · superbiz.se.pl · suwalki.info · tabletowo.pl · telepolis.pl · telko.in · warszawawpigulce.pl · wiadomosci.onet.pl
This summary has been updated 10 times: see revision history