In brief

• Polish payment operator Autopay detected unauthorized access to part of its infrastructure and payment data on November 11, 2026.
• Exposed data may include email addresses, IP addresses and card details used for payments, though theft has not been confirmed.
• Autopay is contacting affected customers directly and advising them to check their card transactions.

Attack detected on November 11

Autopay said it found unauthorized access to part of its infrastructure and some data on payments it processed on November 11, 2026 (Dane Polaków znów wyciekły? Przez ten serwis przechodzi wiele płatności - stał się celem cyberataku – WNP.pl). The company has blocked the access, tightened monitoring and notified the Polish Office for Personal Data Protection, the police and the CSIRT KNF cybersecurity team at the Financial Supervision Commission (В Польше атаковали платежный сервис Autopay. Под угрозой оказались данные карт – Reform.news).

Which data may be affected

According to a notice sent to users, the intruders could have reached email addresses, IP addresses and the card details used for payments. For mobile top-ups, the phone number may also be involved. The company did not specify which card details could have been accessed.

Autopay has not confirmed that data was copied or misused, but it said it cannot rule this out (Cyberatak na Autopay. Spółka ostrzega klientów i wysyła bezpośrednie powiadomienia – Bankier.pl). The scope of the incident is still being assessed.

Customers contacted directly

Each person whose data may have been exposed is being contacted individually with specific recommendations, a company spokeswoman told PAP. Customers are advised to review their card transaction history and act quickly on any suspicious charges.

Attack method

According to the company's findings so far, the attackers did not use malware or phishing (Cyberatak na Autopay. Mogły wyciec dane klientów – RMF24). The attack reportedly showed signs of heavy automation supported by artificial intelligence. Autopay says it is conducting a detailed security analysis of the incident's extent.

Scale of the company

Autopay says its services are used by 15 million people and 50,000 companies. The company has not yet said how many people the incident may affect.