According to The Record, Polish authorities are investigating a cyberattack on healthcare software provider MyDr that may have exposed data of nearly 19 million people and more than 12,000 medical facilities [1]. Authorities say hackers accessed historical data held in MyDr systems through April 2024; the company says it removed the cause and has found no evidence the data was published, and the digital affairs minister said the e-Health Center will replace certificates medical systems use to connect to the national P1 platform as a precaution [1]. Medical facilities should cooperate in replacing their P1 connection certificates, and patients should watch for scams using medical or identity data [1].
Polish medical software provider MyDr breached by deliberate attack; historical data of nearly 19 million people and 12,000+ facilities may be exposed
1 min read
- Disclosed
- Aug 17, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Healthcare
What to do nowOur advice
- Medical facilities should cooperate with the e-Health Center in replacing the digital certificates used to connect to P1 [1].
- Patients should watch for scams and identity misuse using medical or personal data .
Timeline
- The Record reports Polish probe into MyDr breach[1]
Technical details
Remediation
Vendor guidance
- 1Replace P1 connection certificates mitigate[1]
Medical facilities should cooperate with the e-Health Center in replacing certificates used to connect to P1.
References
Media1
- [1]
“Polish authorities are investigating a cyberattack targeting healthcare software provider MyDr that may have exposed data belonging to nearly 19 million people and more than 12,000 medical facilities.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.