Tag: ePUAP

  • Poland takes its national e-government platform offline after a cyberattack

    Poland takes its e-government platform ePUAP offline after stopping a cyberattack, disrupting access to public services.

    Poland temporarily shut down ePUAP, the government platform citizens and businesses use to reach public services, after detecting and stopping a cyberattack. A notice on the government’s website says ePUAP electronic mailboxes are unavailable to citizens and public institutions.

    ePUAP is a nationwide system for submitting official documents, communicating with government agencies and completing administrative procedures online. Digital Affairs Minister Krzysztof Gawkowski said on social media that the attack was detected and stopped.

    “A cyberattack on the state-run ePUAP system has been detected and halted. The teams responsible for the system’s security took immediate action to maintain its stability, and technical work is currently underway to restore full functionality.” the Minister wrote on X. “The infrastructure of the Central IT Center remains secure.”

    He added that security teams responded immediately and are working to restore full functionality.

    The minister said the Central Information Technology Center, the agency responsible for ePUAP and other key digital services, was not affected. Officials explained that the platform was taken offline as a precaution, not because the attack caused any damage. Marek Gieorgica, a spokesperson for the Digital Affairs Ministry, told the Polish news agency PAP that the system had not been compromised or disrupted by the attack. In other words, the service was shut down even though no damage was reported.

    Many details are still unknown. Authorities have not explained how the attack was carried out or who was behind it. There is also no public confirmation that attackers accessed government systems or stole sensitive data. The ministry has not provided a timeline for restoring services, saying they will return once security experts complete their checks.

    The disruption could also briefly affect the Trusted Profile digital identity system, which lets people use public services and sign official documents electronically. For someone with a deadline for a filing, that’s a practical problem even if no data was lost.

    The incident is part of a wider pattern. In recent months, Poland has faced several cyberattacks targeting government agencies, critical infrastructure and private companies. The Record reported that in October, Fakturownia, an online invoicing service, disclosed a data breach that may have exposed information belonging to its users, customers and business partners.

    Follow me on Twitter: @securityaffairs and Facebook and Mastodon

    Pierluigi Paganini

    (SecurityAffairs – hacking, Poland)

    Source: Security Affairs · 2026-11-12