Data of millions of patients at risk. The government announces urgent changes

The police are analyzing information that may have been stolen from MyDr systems. The attack could have affected up to 31 million records regarding Polish patients. The intercepted data allegedly included PESEL numbers, prescription information and notes from medical visits. Deputy Minister of Digitization Dariusz Standerski said in the “Fakty po Faktach” program that the services are still determining the exact scope of the leak. They also check whether the burglars’ declarations correspond to reality.

Did the stolen MyDr data find its way online? The deputy minister calms down

According to current information, the seized data has not been published or offered for sale.

— Most importantly, this data does not circulate on the Internet – assured Standerski.

NASK and services monitor the Internet, including websites used by cybercriminals. So far, information from MyDr systems has not been detected to be publicly disclosed. However, this does not mean the end of the matter – verification activities are still ongoing.

The attack revealed a problem with liability for medical data. About 12,000 people used MyDr’s services. entities. They were formally the administrators of the information and responsible for its protection, although the data was stored and processed by an external supplier.

The government is preparing new regulations after the attack on MyDr

The Ministry of Digitization is to present proposals for changes to the law next week. The new regulations are intended to increase the responsibility of companies that massively process sensitive information. Additional obligations will also apply to entities that are not formal data controllers, but in practice store huge amounts of information about patients. According to the deputy minister, the current regulations do not cover them sufficiently.