Threat watch / Attack
Poland: ePUAP government services platform shut down after a cyberattack
Poland's Digital Affairs Minister Krzysztof Gawkowski said a cyberattack on ePUAP, the national platform for sending official documents and dealing with public agencies online, was detected and stopped. The ministry took the platform offline as a precaution and says the system was not compromised. Authorities have not said how the attack was carried out, who is behind it, or when service will return.
- Sector
- Government & politics
- Way in
- Not public yet
- Product or vendor
- ePUAP
- How it happened
- Not public yet Checked 12 Nov 2026
- What was stolen
- Nothing reported. There is no public confirmation that the attackers reached government systems or took data, and the ministry spokesperson says the system was not compromised and the shutdown was a precaution.[1] Checked 12 Nov 2026
- Who was impacted
- Citizens and public institutions in Poland that use ePUAP: its electronic mailboxes are unavailable until security specialists finish their work. The Record says the Trusted Profile (Profil Zaufany) digital identity may also be briefly affected. No number of users is given.[1] Checked 12 Nov 2026
- Threat actor
- Not attributed
Timeline
- Minister Krzysztof Gawkowski says the cyberattack on the state ePUAP system "was detected and stopped", that technical work is under way to restore full functionality, and that the infrastructure of the Central Information Technology Centre (COI) is secure. [1][2]
- The Record reports that ministry spokesperson Marek Gieorgica told PAP that the system was not compromised or disrupted by the attack: "We simply disabled it as a precautionary measure." No restoration date is given. [1]
- XYZ reports that the Internal Security Agency (ABW) has been brought in to investigate the incident; the minister gives no date for the end of the restoration work and does not say who might be behind the attack. [3]