Cyberattack on major Polish invoicing platform exposes customer data

Fakturownia, a Polish online invoicing platform used by over 600,000 businesses, detected unauthorized access to its servers that may have exposed account data, password hashes, bank account details, authentication tokens and invoices (potentially ~6 TB). The attacker calling itself “Fingerprint” provided alleged screenshots and database dumps; Fakturownia blocked access, rotated credentials, engaged external cybersecurity experts, and reported the incident to authorities, who say the national KSeF system was not compromised.