2026 Enel-Med (Poland) — company confirms confidentiality breach; CBZC/CERT/UODO notified
Data compromised
Company confirmed confidentiality of data was breached but has not publicly disclosed categories, headcount, or attack path. Healthcare context implies patient/contact identifiers may be in scope pending investigation. Census unpublished.
Technical writeup
Verified company disclosure — Centrum Medyczne Enel-Med reported an IT security incident on September 24, 2026 that resulted in a breach of data confidentiality (Warsaw Business Journal / CEO.com.pl, Sep 26). Provider said it immediately secured network/systems/customer data; operations not materially affected. Notified Poland’s Central Bureau for Combating Cybercrime (CBZC), the e-Health Center’s CSIRT, CERT Polska, and the data protection authority (UODO). Categories of data, attack vector, and affected-person census not published. Distinct from verified MyDr (~19M) and Qbusoft/Medyc incidents in the same Polish healthcare wave. recordsAffected 0; companyConfirmed true.
Root cause
IT security incident resulting in breach of data confidentiality (Enel-Med company notice; Sep 24, 2026)