Vulnerabilities · Incident Response
Poland takes ePUAP government services platform offline after cyberattack
Poland has temporarily shut down its ePUAP digital government services platform after detecting a cyberattack. Officials say the shutdown was precautionary and no data breach has been confirmed.
Ross Grant2 min read
The short version
Poland took its main online government services platform, ePUAP, offline after a cyberattack. The shutdown was a precaution, and officials say the attack was detected and stopped. There is no evidence yet that data was stolen or that the system was damaged. Some services, like digital mailboxes and digital identity, are unavailable until security checks are finished.
What happened?
Poland has temporarily shut down its ePUAP government services platform after detecting a cyberattack, according to Recorded Future News. Officials say the attack was stopped and the system was taken offline as a precaution. There is no confirmation that any data was stolen or that systems were compromised. The government has not said when the platform will be restored.
Who is affected
The ePUAP platform is used by citizens and businesses across Poland to access public services online. It lets users submit official documents, communicate with government agencies and complete administrative procedures. The shutdown means both individuals and public institutions cannot use ePUAP electronic mailboxes. The disruption could also affect the Trusted Profile digital identity system, which is needed to access some public services and to sign documents electronically.
The response
According to Poland's Digital Affairs Minister Krzysztof Gawkowski, security teams detected and stopped the cyberattack. The Central Information Technology Center, which maintains ePUAP, was not compromised. Officials say the system was taken offline as a precaution, not because the attack caused damage or disrupted operations. Marek Gieorgica, spokesperson for the Digital Affairs Ministry, told the Polish news agency PAP that the system was not compromised, but was disabled to be safe. There is no timeline yet for when ePUAP will be restored. The government says services will resume once security checks are complete and specialists finish their work.
How the attack worked
Authorities have not disclosed how the attack was carried out or who was responsible. There is no public confirmation that hackers accessed government systems or stole sensitive data. The only detail given is that the attack was detected and stopped, and that the infrastructure remained secure.
Has this happened before?
Poland has seen several cyberattacks on government institutions and private companies in recent months. In October, Fakturownia, an online invoicing provider, reported a data breach that may have exposed user and customer information. In September, hackers stole data from Qbusoft, a healthcare software provider, after a separate breach involving medical technology company MyDr. Authorities said the MyDr incident potentially affected about 19 million people and 12,000 healthcare organisations. Recorded Future News (opens in a new tab)
Why it matters
ePUAP is a key part of how Polish citizens and businesses interact with the government. Even a precautionary shutdown can disrupt access to essential services, highlighting the importance of strong defences and quick incident response for public sector platforms.
Key points
- Poland shut down its ePUAP platform after a cyberattack was detected.
- Officials say the shutdown was precautionary and no data breach is confirmed.
- The attack did not disrupt or damage the system, according to the government.
- ePUAP is used by citizens and businesses for official online services.
- There is no timeline yet for restoring the platform.
Sources
Recorded Future News
Reference
