The MyDr data leak may affect 19 million people. The government search engine has been launched

Data related to the cyberattack on MyDr has been added to the government websitebezpieczdane.gov.pl. The incident may affect up to 19 million Poles and approximately 12,000 people. clinics, offices and other medical entities using the platform. MyDr provides a system for maintaining electronic medical records. The information covered by the incident may include PESEL numbers and data on medications and prescriptions. The security breach has been confirmed. However, the services have not yet stated that the information obtained has been made publicly available.

How to check your own data after the MyDr attack?

You should go directly to the websitebezpieczdane.gov.pl, select the option to check your data and log in. You can use the mObywatel application, electronic banking, e-ID or a trusted profile.

The website will show whether the user’s PESEL number was leaked. However, it will not display the exact scope of the information captured. Such details can only be provided by the data controller, i.e. the clinic or doctor’s office whose services were used by the patient.

Has your PESEL been leaked? This is how you reduce your risk

The most important recommendation is to reserve your PESEL number. You can do it free of charge in the mObywatel application, gov.pl website or commune office. A disclaimer helps protect against anyone trying to take out a loan or loan using stolen data.

It’s also a good idea to change recurring passwords, use unique combinations for each account, and enable multi-factor authentication. Be especially wary of telephone calls, e-mails and text messages asking you to provide data or click on a link. It is best to enter the address of the government website in your browser yourself.

CBZC investigation and UODO inspection after a cyber attack

An investigation is underway into the MyDr leak, and the proceedings are being conducted by the Central Bureau for Combating Cybercrime under the supervision of the District Prosecutor’s Office in Warsaw. It concerns unauthorized access to the MyDr system and transfer of part of the obtained information to other people. Such an act may result in up to three years in prison. The President of the Personal Data Protection Office also announced an inspection of MyDr. The Office will examine the security measures used, the risk analysis and whether data protection measures have been regularly tested.