Poland probes major data breach targeting clients of online loan platform SuperGrosz

Polish authorities have launched an investigation into a large-scale cyberattack that compromised personal data belonging to clients of SuperGrosz, an online lending platform operated by AIQLABS Sp. z o.o., Deputy Prime Minister and Minister for Digital Affairs Krzysztof Gawkowski announced on Sunday.

The breach exposed extensive personal information, including names, national identification numbers (PESEL), ID card details, home and email addresses, phone numbers, nationality, marital status, number of children, employment data, employer contact information, declared income, bank account numbers, and Facebook identifiers. Officials described the incident as severe, warning that criminals may attempt to use the stolen information for identity theft or financial fraud.

Gawkowski said that national cybersecurity teams CSIRT KNF, which oversees the financial sector, and CSIRT NASK, the national research network, are conducting the investigation. The Polish Personal Data Protection Office has also been notified. State security services are working to identify those responsible.

The minister urged affected individuals to take immediate precautions, including changing passwords, activating two-factor authentication, and using the government’s mObywatel mobile application to block their PESEL numbers. The PESEL, a unique personal identifier assigned to every Polish citizen, is a critical target in cases of data theft due to its potential misuse in fraudulent transactions.

To assist citizens in verifying potential exposure, the government plans to launch a new website, bezpiecznedane.gov.pl, where users will be able to check whether their personal information was compromised in the attack.

Gawkowski emphasized the growing frequency of cyber incidents in Poland and across Europe, urging both institutions and individuals to strengthen their defenses. “Every company and institution must be properly prepared, and each of us must remain vigilant against online scams,” he said, noting that cybercrime increasingly involves organized groups operating across borders.