Massive cyberattack on state delivery system hits Poland

18 March 2026 Poland Radar 0 Comments

Poczta Polska warns of a massive cyberattack on state delivery system that targets eDoręczenia users and can drain accounts.

Massive cyberattack on state delivery system has prompted a top-level warning from Poczta Polska today. Millions of users of the eDoręczenia service face a sophisticated phishing campaign, and one fake message can ruin your finances.

Consequently, authorities urge immediate caution. Moreover, the campaign impersonates the national postal operator with near-perfect messages. Therefore, many recipients cannot spot the scam at a glance.

Table of Contents

How the attack works

Attackers send realistic notifications that look like official e-deliveries. In addition, these messages contain links to login pages that mimic the real portal. However, the fake pages harvest credentials and personal data. Consequently, criminals use harvested data to access bank accounts and services. Moreover, they may request one-time codes that allow transfers. Therefore, a single click can lead to irreversible financial loss.

Why this matters to expats

Poland relies increasingly on digital official mail for legal notices. For example, the state often sends tax letters, fines (mandat), and social security notices through eDoręczenia. In addition, ZUS (the social insurance institution) and NFZ (the national health fund) may use digital channels to send important documents. Therefore, foreigners who do not use Polish mail often still receive critical notices electronically. Consequently, missing a message could cost you money or legal rights.

Massive cyberattack on state delivery system: what officials say

Poczta Polska issued a highest-level alert and recommended verification steps. Moreover, they advised users to avoid links in unexpected emails and to confirm messages on the official eDoręczenia platform. However, criminals keep refining their approach and they test new tricks daily. Therefore, the risk remains high while investigators work to counter the campaign.

Practical steps to protect yourself

First, do not click unexpected links. Second, always log in via the known portal address or the official app. In addition, enable two-factor authentication for your bank and for any state services. Moreover, check messages for small inconsistencies in language or sender addresses. However, if you suspect compromise, contact your bank and Poczta Polska immediately. Consequently, report the incident to Policja and to UODO if your personal data leaked.

💡 GOOD TO KNOW: If you live in Poland as an expat, you must treat eDoręczenia seriously. This platform can deliver legal notices that affect residency, taxes, and benefits. For example, ZUS handles pensions and contributions, NFZ manages health insurance, and a PESEL number is your national ID. Therefore, ensure your contact details are correct. In addition, register for official portals with secure passwords and two-factor authentication. Moreover, keep copies of official correspondence and verify unexpected messages by logging directly into the official service or by calling Poczta Polska.

Finally, stay informed and cautious. Moreover, share this warning with family or colleagues who use Polish digital mail. Consequently, you reduce the chance that a single fake message will destroy someone’s finances.

Source: Read original article