Skip to content

Critical Infrastructure

Poland shuts down nationwide ePUAP platform after cyber attack

Officials disabled the platform as a precaution after the attack was stopped, with no timeline given for restoring services.

https://breach-signal.com/critical-infrastructure/poland-shuts-epuap-platform-cyber-attack/

Share

Key facts

  • People and companies use ePUAP to file official papers, contact public agencies and handle administrative steps through the internet.
  • Krzysztof Gawkowski, Poland's Digital Affairs Minister, said security teams had responded immediately and were working to restore full platform functionality.
  • The minister said Poland's Central Information Technology Center infrastructure remained secure; the agency maintains key digital services including ePUAP.
  • Officials said the platform was disabled as a precautionary measure, not because the attack damaged it.

Poland temporarily shut down its nationwide ePUAP government services platform after officials detected and stopped a cyber attack, Digital Affairs Minister Krzysztof Gawkowski said Tuesday.

People and companies use ePUAP to file official papers, contact public agencies and handle administrative steps through the internet. A notice on the government’s website says ePUAP electronic mailboxes are unavailable to citizens and public institutions. The outage may briefly hit the Trusted Profile digital identity system. People use the system to reach public services and sign official documents electronically.

Officials said they disabled the platform as a precautionary measure, not because the attack damaged it. Marek Gieorgica, spokesperson for the Digital Affairs Ministry, told Polish news agency PAP that the system was not compromised. He said the attack had not disrupted its operation, and officials disabled it as a precautionary measure. Gawkowski said Poland’s Central Information Technology Center infrastructure remained secure, and the agency maintains key digital services including ePUAP.

He said on Tuesday that security teams had responded immediately and were working to restore full platform functionality. “The cyberattack on the state ePUAP system was detected and stopped,” Gawkowski said in a social media post on Tuesday.

No authority has revealed the method used in the attack or identified who is responsible. There has been no public confirmation that hackers accessed government systems or stole sensitive information. Officials have not given a timeline for restoring the platform. Services will resume after security specialists finish their work.

Recent months have seen repeated cyber attacks against Polish government institutions, critical infrastructure and private companies. In October, Polish online invoicing provider Fakturownia said it experienced a data breach that possibly exposed data of users, customers and business partners. Hackers stole data in September from Qbusoft, a Polish healthcare software provider, after a different breach involving the medical technology company MyDr. Polish authorities said the MyDr incident potentially affected data about 19 million people and roughly 12,000 healthcare organizations.

Was this helpful?

Join the discussion

Please read our Comment Policy before commenting. First-time comments are held for moderation. By posting a comment you agree to our Terms of Use and Privacy Policy, which explain how your name, email address and comment are used.

Your email address will not be published. Required fields are marked *