Fakturownia breach exposes Polish invoicing platform data
Fakturownia, one of Poland's major online invoicing platforms, has disclosed a data breach that may have exposed information on its users and on their customers and business partners.
The company said an unidentified attacker exploited a vulnerability in its systems and gained unauthorized access to its servers. More than 600,000 businesses use the service. Fakturownia has not yet determined how many of them were affected.
What the attacker may have accessed
According to Fakturownia, the potentially compromised data includes:
- user and company account data
- password hashes
- bank account information
- authentication and integration tokens
- information on customers and business partners
The attacker may also have reached invoices issued through the platform before 2023. The company said payment card data and information stored through its integrations were not affected.