Poland Cyber Watchhttps://pwnsy.com/tools/cyber-watch/poland/Sourced cyber incidents and official statements, from pwnsy Cyber Watch.enSun, 08 Nov 2026 00:00:00 +0000Fakturownia: Data leak (Confirmed)https://pwnsy.com/tools/cyber-watch/poland/#all9aa9b348e10de71dThu, 01 Oct 2026 00:00:00 +0000Fakturownia, an invoicing platform used by over 600,000 businesses, confirmed unauthorised server access, and the Finance Ministry said the national e-invoicing system KSeF was not breached. Fingerprint claimed to have stolen 6 TB of invoices. Sources: https://therecord.media/poland-cyberattack-invoice-softwareMedyc (Qbusoft) medical records platform: Data leak (Confirmed)https://pwnsy.com/tools/cyber-watch/poland/#alle16de8092f9813b1Wed, 09 Sep 2026 00:00:00 +0000Medyc confirmed theft of patient identity data after an SQL injection, Minister Gawkowski said the cybercrime bureau is investigating, and the data protection authority ordered an audit. An actor called Fingerprint claimed records on 5 million patients and 8 million photos. Sources: https://therecord.media/poland-cyberattack-medical-medycMyDr: Data leak (Confirmed)https://pwnsy.com/tools/cyber-watch/poland/#all2fd9f43375e6809aMon, 17 Aug 2026 00:00:00 +0000MyDr, a software supplier to clinics, confirmed external criminal access to historical data, and Minister Gawkowski said P1 connection certificates were being replaced as a precaution. People claiming responsibility sent alleged samples of patient data to Zaufana Trzecia Strona; the claims are unverified. Sources: https://therecord.media/poland-probes-mydr-healthcare-software-breachPoland statement: CERT Polska said the attacker reached a second heat plant's OT network through a misconfigured private APN.https://cert.pl/en/posts/2026/08/incident-follow-up-report-energy-sector-2025/356961f4ddfbdaa9Sat, 08 Aug 2026 00:00:00 +0000CERT Polska said the attacker reached a second heat plant's OT network through a misconfigured private APN.Zabka: Intrusion (Confirmed)https://pwnsy.com/tools/cyber-watch/poland/#all87cb2ec127ce2185Tue, 04 Aug 2026 00:00:00 +0000Zabka confirmed unauthorised access to technical systems through a third-party provider's account, and Digital Affairs Minister Krzysztof Gawkowski said customer and payment data were not affected. Unidentified sellers offered allegedly stolen internal data, including source code and credentials, for 5,000 euros on a cybercrime forum. Sources: https://therecord.media/poland-convenience-store-chain-zabka-cyberattackPoland statement: The EU and UK formally blamed FSB Center 16 for the attack on Poland's energy grid and imposed sanctions.https://therecord.media/russia-blamed-for-poland-grid-cyberattack-in-joint-uk-eu-sanctions-packageccc4d64d58c41125Mon, 13 Jul 2026 00:00:00 +0000The EU and UK formally blamed FSB Center 16 for the attack on Poland's energy grid and imposed sanctions.Personal Gmail users in Poland: Not disclosed (Confirmed)https://pwnsy.com/tools/cyber-watch/poland/#all4d33bdf6d3ce1e7fFri, 12 Jun 2026 00:00:00 +0000CERT Polska reported a high-intensity UNC1151 phishing campaign against Polish Gmail users, active since March 2026. Sources: https://cert.pl/en/posts/2026/06/UNC1151-gmail-campaign/Poland statement: The Internal Security Agency (ABW) reported breaches at five water treatment stations.https://therecord.media/polish-intelligence-warns-hackers-attacked-water-treatmentc355537c0223ef71Thu, 07 May 2026 00:00:00 +0000The Internal Security Agency (ABW) reported breaches at five water treatment stations.Poland statement: PM Donald Tusk said end-of-2025 attacks on two heat and power plants and renewable sites could not cause a blahttps://www.polskieradio.pl/395/7784/Artykul/3634276a6bfe69286fe09a8Thu, 15 Jan 2026 00:00:00 +0000PM Donald Tusk said end-of-2025 attacks on two heat and power plants and renewable sites could not cause a blackout and pointed to Russian services.