News update · 26 September 2026
Medyc incident: inspection announced as patients await details
Poland’s data protection authority has announced an inspection of Qbusoft. The precise scope of the affected data remains unclear.
The essentials in two minutes
What is confirmed
On 25 September, UODO announced an inspection of Qbusoft, the company responsible for the Medyc medical software, following reports of a data leak. Poland’s specialist cybercrime police are also involved. The statement does not establish a final number of affected people.
What if you receive a notification?
CERT Polska’s general guidance recommends identifying exactly which data have been exposed. Contact your healthcare provider through its usual contact details to understand your situation. If a password is compromised, change it, including on other services where you reuse it. Be wary of messages demanding urgent action or login credentials.
Our point of caution
A national announcement does not establish that every patient is affected. Keep any notifications you receive and distinguish information about your own records from circulating figures. The links below provide access to the original statement and security advice.