In Poland, after a massive data breach, fraud protection is being strengthened

illustrative, person working on laptop / unsplash
Фото: illustrative, person working on laptop / unsplash

In Poland, after a massive data breach from the myDr medical platform, fraud protection measures are being strengthened. The incident could have affected about 18.8 million people, and Biuro Informacji Kredytowej (BIK) announced a special action with free access to the Alerty BIK service.

Alerty BIK allows you to quickly find out if someone is trying to use someone else's personal data to apply for a loan, payday loan or other financial obligation. The user receives a notification when a request regarding their data is submitted to BIK. The service can also alert about the appearance of PESEL, document number or email address in breach databases on the dark web.

After the incident, the Polish authorities recommended citizens to additionally block their PESEL number. This can be done online through the mObywatel application or website, as well as at the commune office.

A blocked PESEL provides additional protection against taking out loans and advances in someone else's name. Financial institutions are required to check the status of the number before concluding certain contracts. At the same time, blocking PESEL does not prevent the use of medical services, obtaining prescriptions, handling most matters at government offices or travelling.

In the wake of the breach, a separate fraudulent scheme has emerged. In the Polish information space, fake statements allegedly for changing the PESEL number are being circulated. You should not fill out such documents or provide personal data through them. To protect against the consequences of the breach, you should use the zastrzeżenie PESEL function, not submit third-party "applications for number change".

You should also be more careful with phone calls, SMS and emails. If a fraudster has a person's real name, PESEL number or other information, it can be used for more convincing phishing and attempts to obtain bank details, passwords or confirmation codes.

Source: Business Insider Polska, Biuro Informacji Kredytowej, mObywatel

analytics