Polish Prosecutors Investigate Cyberattack on Zabka Retail Network
Summary
Polish prosecutors are investigating unauthorized access to Zabka systems through an external supplier account. Reports say employee and partner data were exposed and some customer data may have leaked; officials said stores and transaction data were unaffected.
Key points
- Zabka said it discovered unauthorized access to technical resources used to exchange information between the franchisor and franchisees.
- The reported access involved an external service provider account; a sample allegedly offered for sale suggested access to Zabka’s Jira system.
- Niebezpiecznik reported exposure of employee and partner personal data and said some customer data may also have leaked.
- Attackers reportedly offered stolen data for €5,000 and emailed companies working with Zabka and journalists about the incident.
- Polish authorities are investigating possible unlawful access to information; the investigation is at an early stage and no one has been charged.
- A Polish official said the incident did not affect Zabka app customer data, transaction data, or store operations.
Article Details
- Victim Organization
- Zabka
- Incident Type
- Unauthorized access using an external service provider's account, with reported theft and sale of data
- Data Types Exposed
- Personal data of employees and partners with access to Zabka infrastructure
- Possibly some customers' data, according to Niebezpiecznik
- Operational Impact
- Zabka's vice-prime minister said the incident did not affect customer data in the Zabka app, transaction data, or store operations. The reported sample suggested the intruder had access to Jira.
- Ransom Or Extortion
- Niebezpiecznik reported that cybercriminals offered stolen data for sale for EUR 5,000. No ransom demand was reported.
- Claim Status
- alleged
People
Krzysztof GawkowskiPolish deputy prime minister and minister of digital affairs; said the incident did not affect Zabka app customer data, transaction data, or store operations.Łukasz WawrzyniakProsecutor who commented that investigators were examining how the attackers breached and bypassed security measures.