
The Ministry of Culture and National Heritage informs about an attack on the platform handling applications for funding and scholarships
AI-generated summary
The Program Management System of the Ministry of Culture and National Heritage (SOP) was implemented in the fall of 2024. As part of the recruitment for the programs of the Minister of Culture for 2025, over 13,000 applications were submitted via the SOP. projects up to 32 programs. The ministry allocated PLN 537 million to co-finance them.
The sopprogramy.mkidn.gov.pl platform, through which applications for funding under the Programs of the Minister of Culture and National Heritage can be submitted, was attacked. In the SOP system, through the sopstypendia.mkidn.gov.pl portal, applications for scholarships from the Minister of Culture are also processed.
The attack was to take place on October 6. The ministry assures that it was detected on the same day.
The Ministry has prepared an emergency procedure that enables the implementation of granted subsidies and current settlement of projects regardless of the SOP system. We are at the stage of forwarding the procedure to the applicants affected by it, said Piotr Jędrzejowski, spokesman for the Ministry of Culture.
The ministry spokesman explained that no traces of data being copied or sent externally were identified in the system, but a leak cannot be ruled out.
What data could have fallen into the hands of cybercriminals?
There are approximately 24,000 registered in the SOP system. users. Okay. 14 thousand accounts related to the programs of the Minister of Culture, approximately 10 thousand – with scholarships.
According to the information provided by the ministry, a possible data leak could include categories such as:
name and surname,
residential address, registered address, business address,
phone number,
email address,
PESEL number,
ID document number and series,
citizenship,
country,
bank account number.
As in the case of most typical cyberattacks, the ministry suggests that you reserve your PESEL number and remain vigilant, as the data may be used to attempt fraud.
After a cyber attack on the website sopprogramy.mkidn.gov.pl, the SOP system was disabled. Access to the data was blocked and the system was secured, and the incident was reported, among others, to the Personal Data Protection Office.
What industries use the attacked system?
The Program Management System of the Ministry of Culture and National Heritage was implemented in autumn 2024. As part of the recruitment for the programs of the Minister of Culture for 2025, over 13,000 applications were submitted via the SOP. projects up to 32 programs. The ministry allocated PLN 537 million to co-finance them. These include initiatives related to, among others: with artistic and cultural education, literature, music, promotion of reading, theater, folk art and protection of monuments.
AI outlook — possibilities, not facts
The Ministry of Culture and National Heritage will inform about the results of investigating the incident and possible data leakage
Likely · Within weeks

Representatives of the EU, ENISA, Europol and Member States met to discuss the wave of cyber attacks on European commercial networks and coordinate a joint response.

In Poland, there were cyberattacks on refrigeration systems in stores and food distribution points. Hackers remotely raise the temperature of devices, which threatens to spoil goods. CERT Polska warns against leaving equipment connected to the network.

In Poland, a free application "Where to hide PL" has been made available, which contains a database of over 88,000 shelter points for over 24 million people. The tool also works offline and offers guides in case of crisis situations.

CERT Polska warns against a new wave of phishing attacks targeting entrepreneurs. Fraudsters send fake emails asking you to update your documentation in order to obtain your banking login details.

CERT Polska and the Ministry of Digitization warn about critical vulnerabilities in PHP software, affecting versions from 5.4 and above. For security reasons, some BIP websites operating in the SSDIP system have been temporarily disabled.

Cybercriminals send false calls to companies installing surveillance cameras, impersonating the Office of Personal Data Protection. The messages request hardware details, IP addresses and serial numbers in order to take control of devices.