Cyberattack on Polish invoicing platform Fakturownia exposes customer data

Poland's online invoicing platform Fakturownia suffered a breach after an attacker exploited a vulnerability to access its servers. The service is used by over 600,000 businesses; exposed data may include account details, password hashes, bank information, tokens and invoices issued before 2023.

• Fakturownia is used by more than 600,000 businesses
• Leaked data includes password hashes, bank details and integration tokens
• Attacker 'Fingerprint' claims to have stolen 6 TB of invoices
• Poland's Finance Ministry found no breach of the KSeF system