The Ministry of Culture and National Heritage (MKiDN) says that following a cyberattack, the data of users of its systems may have been made available to an unauthorised person. The ministry recommends, among other things, blocking the PESEL number and considering replacing the identity document; according to PAP, the data of approx. 24 thousand people may be at risk.
The incident took place on 6 October. As stated in an MKiDN notice for users of the Programme Support System (SOP), access to the system has been blocked and the system itself has been isolated. The ministry said that an analysis is under way to determine what data may have been obtained and to what extent.
What data may have leaked
In a notice of a personal data breach, published in the MKiDN scholarship management system, the ministry lists a broad range of information. This includes first and last name, addresses (residential, registered and business-related), phone number, email address, PESEL number, identity document number and series, citizenship, country and bank account number.
The ministry points to a „gap in the IT system” and an attack by an „unidentified perpetrator”. It stresses that the analysis is ongoing and its results will determine the final risk assessment. The incident has been reported to CSIRT GOV, run by the Head of the Internal Security Agency (ABW), and to the President of the Personal Data Protection Office.
What about the system and grants
As the ministry’s spokesperson told PAP, the system used, among other things, to settle the ministry’s grants remains switched off. However, the ministry has prepared a procedure allowing it to handle ongoing projects. The spokesperson added that a data leak cannot be ruled out. The figure of approx. 24 thousand users was given by Bankier.pl; we did not find such a number in MKiDN’s available communications.
What it means for users
The ministry’s systems are used, among others, by grant applicants, scholarship holders and cultural organisations. If someone had an account there, the ministry recommends:
- blocking the PESEL number,
- monitoring the bank account, if financial data has been exposed,
- considering replacing the identity document,
- changing the password if it was affected, and not sharing passwords or authorisation codes with anyone.
The ministry also warns against emails, text messages and phone calls concerning SOP user data. The data may be used for impersonation, fraud attempts or extracting further information. In case of a suspicious contact, the sender should be verified through the ministry’s official channels.
As of publication, the MKiDN has not disclosed the final scope of the leak or whether the perpetrator published the data. It is also unknown when the system will be restored.
