Cyberattack on Poland's state ePUAP system detected and stopped, minister says

In brief

• Poland's Digital Affairs Minister Krzysztof Gawkowski said a cyberattack on the state ePUAP platform was detected and stopped on Tuesday evening.
• Security teams acted immediately to keep the system stable, and technical work to restore full functionality is still ongoing.
• The Central Computing Centre's infrastructure is described as secure, and the ABW internal security agency has joined the investigation.

Attack detected and halted

Deputy Prime Minister Krzysztof Gawkowski announced on Tuesday evening that an attack on ePUAP, the government's online platform for public administration services, had been detected and stopped (Cyberatak na państwowy system ePUAP. Wicepremier: podjęto natychmiastowe działania – GazetaPrawna.pl) (Cyberatak na system ePUAP. Pilny komunikat wicepremiera – Interia Wydarzenia) (Cyberatak na system ePUAP. Gawkowski: Został zatrzymany – Money.pl) (Problemy z systemem ePUAP. Minister Gawkowski potwierdza atak i uspokaja – Onet) („Wykryty i zatrzymany”. Cyberatak na państwowy system ePUAP – RMF24) (Gawkowski: Wykryto i zatrzymano cyberatak na system ePUAP – Rzeczpospolita). He said security teams acted immediately to keep the system stable.

Systems and status

Gawkowski said the infrastructure of the Central Computing Centre (Centralny Ośrodek Informatyki) remains secure. Engineers are now working to bring the platform back to full functionality, and he did not give a date for that.

Investigation

The Internal Security Agency (ABW) has been brought into the case so the incident can be fully examined under standard procedures.

What ePUAP does

ePUAP lets citizens communicate with public bodies online. People use it to send applications, requests and documents to offices, and to sign documents with a Trusted Profile (Profil Zaufany).

What remains unclear

The available reports do not say who carried out the attack, how it was carried out, or how long the disruption lasted. The statements so far focus on the platform's stability and the recovery work.