Criminals breached AIQLABS sp. z o.o., the operator of the Supergrosz financial service platform in Poland, gaining unauthorized access to highly sensitive personal data of users. The compromised information includes names, national ID numbers (PESEL), ID card details, email/home addresses, phone numbers, marital status, employment details, declared income, bank account numbers, and Facebook identifiers. The breach poses severe risks of identity theft, financial fraud, and targeted scams, prompting Polish authorities—including CSIRT KNF, CSIRT NASK, and the Personal Data Protection Office—to investigate. Users were urged to block their PESEL numbers via the mObywatel app, change passwords, and enable two-factor authentication. A government portal (bezpiecznedane.gov.pl) was launched to help citizens verify if their data was exposed. The incident follows recent cyberattacks in Poland, including a BLIK payment system outage and an ITAKA travel agency data leak, highlighting escalating cyber threats in the region.