Poland temporarily shuts down nationwide ePUAP platform after cyberattack

Poland took ePUAP offline as a precaution after security teams detected an attack on the system that lets users submit official documents, communicate with agencies and complete administrative procedures online. Digital Affairs Minister Krzysztof Gawkowski said the attack was detected and stopped, while the infrastructure of the Central Information Technology Center remained secure. A ministry spokesperson said the platform was disabled rather than damaged or compromised, and authorities did not disclose the attack method or responsibility.

The evidence released so far is limited but specific. Government notices said ePUAP electronic mailboxes remained unavailable to citizens and public institutions, and the Trusted Profile digital identity system could be temporarily affected. The Trusted Profile is used to access public services and electronically sign official documents. Officials did not confirm that attackers gained access to government systems or stole sensitive information, and no timeline for restoration was provided.

The shutdown sits inside a broader pattern of cyber incidents involving Polish digital services in recent months. In October, Polish online invoicing provider Fakturownia reported a data breach that may have exposed information belonging to users, customers and business partners. In September, hackers stole data from healthcare software provider Qbusoft after a separate breach involving MyDr, an incident Polish authorities said potentially affected information relating to about 19 million people and roughly 12,000 healthcare organizations.

The operational significance is immediate for people and businesses that rely on ePUAP for routine state interactions. When electronic mailboxes and identity-linked services are unavailable, administrative filings, communications with agencies and signed documents cannot proceed through the normal digital channel. Poland's position as a NATO member that has faced repeated cyber incidents makes any interruption of core administrative infrastructure more consequential than an isolated IT outage, but officials have not publicly linked this incident to a named actor.