Hackers Target Medyc App Following MyDr Data Breach

Cybercriminals linked to the recent MyDr data breach have launched a new attack on Polish medical records through the Qbusoft application, Medyc.pl. Authorities and security firms report that hackers exploited an SQL injection vulnerability between August 22–23 to steal encrypted database archives from at least one clinic in Inowrocław, though sources estimate over five million individuals may be affected across multiple facilities. Although names were stored as hashed data, experts note the encryption was easily broken by attackers who also utilized a bot for additional access. The compromised records included full names, PESEL numbers (personal identification codes), addresses, phone numbers, and email addresses from patients treated between 2016 and September 2023.