Poland has reported one of the largest cyberattacks in the country's history. Polish Digital Affairs Minister Krzysztof Gawkowski announced a major medical data breach affecting nearly 19 million citizens.
The cyberattack targeted online patient records on a platform used by doctors and clinics. The data management service MyDoc, which is used by approximately 12,000 medical institutions in Poland, announced it wants to assist every patient who suffered damage due to the data theft.
Number of individuals whose medical records were compromised in the breach.
The stolen information includes names, addresses, dates of birth, Pesel numbers, information on doctor visits, prescriptions, and medical histories. According to a written statement from MyDoc, the stolen data primarily consists of data from the year 2024 and earlier.
Hackers allegedly copied the information from an Amazon cloud. To provide proof of possession of the data, the hackers presented the patient data of a well-known politician to the Polish web portal Die vertrauliche dritte Seite.
Investigation and government response
Krzysztof Gawkowski stated that the 19 million stolen records contain various types of data that can be linked together. He also stated there are currently no indications that the data was stolen as a result of an attack by another country. Initial investigations suggest that neither Russia nor another state was behind the cyberattack.
Nobody will negotiate with anyone. Nobody will give in to any blackmail.
The Polish Digital Affairs Ministry intends to launch a website where individuals can check if their patient data has been hacked.
