Zdrowit S.A. confirmed unauthorized access to its IT systems and encryption of some resources. A ransomware group later published a file allegedly linked to the company, but its origin and whether data leaked remain unverified.
Ransomware encrypted email correspondence at Warsaw clinic network SPZOZ Warszawa-Ursynów. The provider says patient and other data may have been copied, but this remains unconfirmed as forensic analysis continues.
PaKK-MED said ransomware struck its systems on July 21, 2026. The Polish healthcare provider shifted partly to paper-based work and warned that patient and employee data may have been exposed, though no theft is confirmed.
