Urgent announcement from the Deputy Prime Minister. Another cyber attack on a well-known company
Invoice Shop, a company offering online invoicing and accounting systems, fell victim to a cyber attack. Data of users and their contractors was leaked.
Deputy Prime Minister and Minister of Digitization Krzysztof Gawkowski announced on Tuesday about a serious security incident that affected Fakturownia. One of the largest Polish companies offering online invoicing and accounting systems fell victim to a cyber attack.
– The Invoicing company, providing accounting systems, fell victim to a cyber attack. The incident was reported to CERT Polska and the services are working intensively to determine the exact circumstances of the incident. This is another incident involving a private company. Invoicing has undertaken activities in cooperation with relevant state institutions – wrote Gawkowski on the X platform.
The invoice office confirmed that an unauthorized person took advantage of the security vulnerability by gaining access to some user data.
The leak concerned, among others: data of user accounts and their contractors, invoices issued before 2023, password hashes, bank account numbers, payment information and application system keys and passwords. As the company assures, there was no breach of data integrated with KSeF or payment card data.
The invoice office asks you to change your passwords
Invoice appeals to all users to immediately change the password for the account, as well as for the associated e-mail box and other websites where the same password was used. It is also recommended to enable two-step verification and carefully check the account settings, including the bank account number and the list of users with access to the system.
The company warns against fraud attempts. Users may soon receive suspicious e-mails, text messages or phone calls impersonating known institutions. Under no circumstances should you provide passwords, verification codes or payment card details.
The services are working intensively to establish the identity of the perpetrators. Experts do not rule out that they may be related to previous high-profile data leaks from MyDr and Qbusoft. – The services responsible for security respond immediately and support every entity that reports such incidents. The perpetrators are being prosecuted and will face severe consequences – emphasizes Deputy Prime Minister Gawkowski.
The head of the Ministry of Digital Affairs indicates that the latest attacks “show that the private sector must increase expenditure and efforts to protect cybersecurity.” – Support from state institutions and services is available 24/7. I recommend using the Cyber.gov.pl portal, which is a reliable source of support in improving the level of cybersecurity – wrote Gawkowski.
