Ransomware Attack Disrupts Polish Healthcare Provider PaKK-MED

Summary

PaKK-MED said ransomware struck its systems on July 21, 2026. The Polish healthcare provider shifted partly to paper-based work and warned that patient and employee data may have been exposed, though no theft is confirmed.

Key points

• PaKK-MED reported that a ransomware incident affected its IT systems on July 21, 2026.
• The provider operates four primary care facilities in the West Pomeranian region of Poland.
• The incident may have involved patients, their representatives and authorized persons, as well as employees.
• Potentially affected data includes names, PESEL numbers, birth dates, addresses, contact details and information about healthcare services; exposure has not been confirmed.
• PaKK-MED reported the incident to Poland’s data protection authority and notified law enforcement.
• The provider partly switched to paper-based work and said it continued delivering care.
• PaKK-MED advised caution with unexpected emails, texts and calls, and suggested considering PESEL-number reservation and BIK alerts.