[REVISION HISTORY]

Escalating cyberattacks on Polish healthcare and digitals

10 recorded revisions of this situation.

What changed

2026-10-09 00:45 UTC → 2026-10-11 06:51 UTC · added ~~removed~~

Poland’s healthcare and digital infrastructure continue to face severe cyberattacks. Following breaches at MyDr, Medyc, and an addiction treatment facility in Inowrocław, the scope of the crisis has expanded significantly. On September 29, 2026, a wave of attacks hit multiple sectors. Fakturownia.pl, an online invoicing provider, suffered a breach by an attacker known as ‘Fingerprint’ who accessed account details and bank numbers. Simultaneously, the Państwowa Uczelnia Zawodowa in Suwałki experienced a ransomware attack that encrypted server infrastructure, potentially compromising student PESEL numbers and bank details. In the medical sector, Enel-Med confirmed unauthorized access to approximately 3 percent of its patient database. By October 1, 2026, a hacking group known as Horus claimed responsibility for breaching the FELG Dent system, which serves roughly 16,000 dental practices. This breach may have compromised approximately 2 million patient records, including names, addresses, prescriptions, and e-ZLA documents. The attackers have threatened to leak sensitive data regarding doctors and psychotropic prescriptions unless a ransom is paid. On October 7, 2026, legal proceedings advanced regarding a separate massive breach involving the Polish National Health Fund (NFZ). An indictment was sent to the District Court in Poznań concerning a March 2024 incident where unauthorized access was gained to the eWUŚ system via legitimate employee accounts. While the NFZ estimated approximately 11.1 million people were affected, the Poznań Regional Prosecutor's Office stated that over 13 million individuals had personal data, including names and PESEL numbers, potentially compromised. An indictment has been filed against five men for using compromised accounts from two medical entities to send automated queries via the MyDr platform. Additionally, software provider IQ Dental reported a breach on October 1, where unauthorized API queries potentially exposed patient names, PESEL numbers, and visit details across 36 dental clinics.

Versions

Select a version to see what changed compared to the one before it.