Centrum Informatyki Państwowej

Summary

Poland temporarily shut down the ePUAP government services platform after detecting and stopping a cyberattack, with the Central Information Technology Center's infrastructure remaining secure. Officials took the platform offline as a precaution, and the disruption also affected electronic mailboxes and the Trusted Profile digital identity system used for accessing public services and signing documents. Authorities have not disclosed the attack method or perpetrator, and no confirmation exists that hackers accessed government systems or stole sensitive information.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Poland temporarily shut down the ePUAP government services platform after security teams detected and stopped a cyberattack targeting the nationwide system. The platform allows citizens and businesses to submit official documents, communicate with government agencies, and complete administrative procedures online. Polish Digital Affairs Minister Krzysztof Gawkowski stated that security teams responded immediately to the incident and were working to restore the platform's full functionality. In a social media post, Gawkowski said the cyberattack on the state ePUAP system was detected and stopped. Officials confirmed that the infrastructure of Poland's Central Information Technology Center, the government agency responsible for maintaining key digital services including ePUAP, remained secure throughout the incident. The ePUAP platform was taken offline as a precaution rather than because of damage caused by the attack. Marek Gieorgica, a spokesperson for the Digital Affairs Ministry, told Polish news agency PAP that the system was not compromised and its operation was not disrupted by the attack. Authorities have not disclosed how the attack was carried out or who was responsible. There has been no public confirmation that hackers gained access to government systems or stole sensitive information.

The ministry has not provided a timeline for restoring the platform, stating that services will resume once security specialists complete their work. According to a notice on the government's website, ePUAP electronic mailboxes remain unavailable to citizens and public institutions. The disruption could also temporarily affect the Trusted Profile digital identity system, which allows people to access public services and electronically sign official documents. Poland has faced repeated cyberattacks targeting government institutions, critical infrastructure, and private companies in recent months. In October, Polish online invoicing provider Fakturownia reported a data breach that may have exposed information belonging to its users, customers, and business partners. In September, hackers stole data from Qbusoft, a Polish healthcare software provider, following a separate breach involving medical technology company MyDr. Polish authorities said the MyDr incident potentially affected information relating to about 19 million people and roughly 12,000 healthcare organizations.

Sources

Sources available to members: 1 source.