MyDr data theft affects 19M patients and 12,000 clinics in Poland
This digest was compiled by AI from multiple sources — links to the originals are below.
A hack on Polish electronic medical documentation software firm MyDr affects nearly 19 million people and more than 12,000 healthcare facilities, government officials estimate. Polish authorities open an investigation on Aug. 12 into the alleged 2.5 terabyte data theft after cybercriminals gained access no later than Aug. 6. MyDr says its systems are fully operational while investigators monitor the darkweb for published data.
Key Facts
- Poland's Central Bureau for Combating Cybercrime opened an investigation on Aug. 12 into the alleged 2.5 terabyte data theft from MyDr.
- Cybercriminals appeared to have gained access to MyDr's IT environment no later than Aug. 6.
- Compromised records include PESEL numbers — lifetime identifiers used for rentals and utilities — along with names, phone numbers, email addresses, and doctor visit notes.
- MyDr said its systems are fully operational and investigators have found no evidence of published MyDr data on the darkweb.
The Breach
MyDr, a Polish provider of electronic medical documentation software, suffered a hack through the internet into all or part of its IT system. The incident affected more than 12,000 healthcare facilities and nearly 19 million people, about half of Poland's population, according to government estimates. Poland's Central Bureau for Combating Cybercrime said an unidentified person obtained unauthorized access to MyDr servers and stored information. Cybercriminals appeared to have entered the IT environment no later than Aug. 6.
Compromised Data
Compromised records include PESEL numbers, unique lifetime identifiers used for tasks such as rentals and utilities. Other exposed data includes names, telephone numbers, email addresses, and health information such as doctor visit notes and issued prescriptions. MyDr said the data involved is likely historical, dating back to 2024 and earlier. The company cannot confirm the amount and type of leaked data until the forensic investigation is completed.
Investigation and Status
Polish authorities launched an investigation on Aug. 12 into the alleged 2.5 terabyte data theft. MyDr stated its systems are fully operational and secure for patients and doctors. Investigators are actively monitoring the darkweb and confirmed no evidence of MyDr data being published or publicly available.
1 source
MyDr data theft affects 19M patients and 12,000 clinics in Poland
