Criminals executed a severe cyberattack on Supergrosz, a financial service platform operated by AIQLABS sp. z o.o., compromising highly sensitive personal data of users. The breach exposed names, national ID numbers (PESEL), ID card details, email/home addresses, phone numbers, marital status, employment data, employer contacts, declared income, bank account numbers, and Facebook identifiers. The incident prompted urgent intervention from Poland’s CSIRT KNF (financial cybersecurity team) and CSIRT NASK, alongside notifications to the Polish Personal Data Protection Office. Authorities warned users to secure their PESEL numbers via the mObywatel app, change passwords, and enable two-factor authentication. A government portal (bezpiecznedane.gov.pl) was launched to help citizens verify if their data was leaked. The attack underscores a rising trend of organized cybercrime targeting critical personal and financial information, with potential for large-scale identity theft and fraud. The breach coincided with other major incidents in Poland, including a BLIK payment system outage and a separate ITAKA travel agency data leak.