Massive cyberattack in Poland leaks medical data of 19 million citizens

On August 12, 2026, Polish authorities confirmed a major cyberattack targeting a medical software provider, resulting in the exposure of sensitive personal and health records belonging to approximately 19 million citizens. The scale of the breach is significant given that the total population of Poland is roughly 37 million people.

Polish Minister of Digital Affairs Krzysztof Gawkowski described the incident as one of the largest and most severe cyberattacks in the history of the country's national cybersecurity infrastructure. Authorities have initiated investigations into the breach, which has caused widespread concern regarding the security of patient data managed by third-party vendors.