According to RMF FM reporter Michał Dobrołowicz, it may take the E-Health Center even several days to verify reports about another medical data leak.
FELG Software, a company providing software to dental offices, reported the incident on its website. The leak may concern patient data and medical records.
We regret to inform you that we also fell victim to a hacker attack (...). The person claiming to be the perpetrator of the attack claims to have gained access to approximately 10 percent. data from our database and demands a ransom for not disclosing them. We reported the possibility of committing a crime to the prosecutor's office and contacted the Personal Data Protection Office. Currently, we are determining the actual scale of the attack and the patients whose data may have been disclosed - explained the company's president, Grzegorz Stawarz.
Up to 2.4 million pieces of data could have fallen victim to a hacker attack
On the FELG website you can read, among other things, that the company's solutions are trusted by over 4,000 people. dental offices and 16 thousand doctors and hygienists. It was also indicated that there are 12 million patient cards in the FELG system. According to specialist cybersecurity portals - Sekurak and Niebezpiecznik - the leak could have affected 2.4 million records with patient data.
"In connection with reports regarding a cybersecurity incident at FELG Software, we would like to inform you that the matter is being monitored on an ongoing basis by the relevant services and state institutions, including CSIRT CeZ. At the same time, we would like to inform you that there has been no breach of the security of central e-health services," the e-Health Center team told PAP on Friday afternoon.
FELG announced that the system for dental offices remains available and can be used for everyday work without any threat to users. The company also said that after determining the scope of the incident, it will contact individual facilities. "If we determine that the event concerns data processed for your facility, we will immediately provide you with appropriate information along with further instructions on the required actions," the company said.
This is another such case
The attack on FELG Software is another incident in the health sector in recent weeks. On September 25, Centrum Medyczne Enel-Med announced a data leak that may affect nearly 3 percent of the entire patient database. A day earlier, the editorial offices of CyberDefence24 and Zaufana Third Party independently reported the leak of personal data, including medical data, of approximately 5 million people as a result of an attack on the Medyc application from Qbusoft. The website medyc.pl indicates that the scope of stolen data includes: names and surnames, PESEL numbers, residential addresses, telephone numbers and e-mail addresses of patients. The company did not confirm the theft of medical records.
Cyber attack on MyDr
In August, the Ministry of Digitization announced that as a result of a cyberattack on MyDr, the data of 19 million Poles had been leaked, including: about medicines and prescriptions. On Thursday, CSIRT CeZ indicated that the number of incidents in the health care sector is increasing this year. In mid-September, the team recorded nearly 1,400; as much as throughout 2025.
CSIRT CeZ (Cyber Security Incident Response Team) was established on December 1, 2023 by the Ministry of Health. The team works with CSIRT MON, CSIRT NASK and CSIRT GOV to coordinate the handling of serious incidents.
