{
  "id": "epuap-service-outage",
  "url": "https://ohshit.app/incidents/epuap-service-outage/",
  "title": "Poland takes ePUAP government mailboxes offline after stopping a cyberattack",
  "level": 3,
  "level_name": "sharted",
  "date": "2026-11-10",
  "date_is_approximate": false,
  "updated": null,
  "tags": [
    "ePUAP",
    "government",
    "service disruption"
  ],
  "ecosystems": [],
  "summary": "Poland’s digital affairs minister says an attack on ePUAP was detected and stopped. The government took the nationwide filing platform offline as a precaution. Public notices confirm service disruption but do not establish a data breach.",
  "splash": "Citizens, businesses and public offices using Poland’s ePUAP mailboxes or services that depend on them.",
  "wipe": "Check Gov.pl for restoration and ask the receiving office which alternative channel it accepts for urgent filings.",
  "in_the_wild": "unknown",
  "source_exception": null,
  "cves": [],
  "fixed": [],
  "checklist": [
    {
      "title": "Confirm the status of the service you need",
      "hint": "Open Gov.pl and the receiving office’s site directly. Check ePUAP, Trusted Profile and e-Doręczenia separately. A restored electronic delivery service does not mean ePUAP is back."
    },
    {
      "title": "Confirm an alternative before sending an urgent filing",
      "hint": "Ask the receiving office which submission routes it accepts for your case and keep the acknowledgement. The Inowrocław office lists telephone, email, post and in-person contact. Confirm whether any of these is valid for the actual filing, rather than assuming a deadline has moved."
    },
    {
      "title": "Verify recovery notices",
      "hint": "Use government or office websites for status and contact details. Avoid unsolicited restoration links or requests for credentials. When the mailbox returns, check for confirmation before resubmitting an item."
    }
  ],
  "sources": [
    {
      "name": "Poland government portal service notice",
      "url": "https://www.gov.pl/",
      "says": "Confirms ePUAP is unavailable to citizens and offices and identifies possible separate disruptions to identity and signing services.",
      "primary": true
    },
    {
      "name": "City of Gdańsk service notice",
      "url": "https://www.gdansk.pl/wiadomosci/Komunikat-Urzedu-Miejskiego-w-Gdansku-Problemy-z-dostepem-do-e-uslug-ePUAP-Profil-Zaufany,a,322512",
      "says": "Reports nationwide disruption and reproduces the minister’s November 10 statement.",
      "primary": true
    },
    {
      "name": "Inowrocław employment office service notice",
      "url": "https://psz.praca.gov.pl/web/powiatowy-urzad-pracy-w-inowroclawiu/strona-glowna/-/asset_publisher/Qat7ebECUfDp/content/uwaga-utrudnienia-w-dzialaniu-epuap-i-e-doreczen?p_r_p_assetEntryId=70882179",
      "says": "Distinguishes ePUAP from e-Doręczenia and lists contact alternatives.",
      "primary": true
    }
  ],
  "headline": null,
  "one_liner": null,
  "in_the_wild_note": "Officials confirm a stopped attack; successful exploitation has not been established.",
  "mitigation": null,
  "timeline": [
    {
      "date": "Nov 10, 2026",
      "title": "Poland announces that an attack on ePUAP was stopped",
      "body": "The digital affairs minister says technical teams are working to restore full functionality."
    },
    {
      "date": "Nov 12, 2026",
      "title": "Official notices describe continuing ePUAP disruption",
      "body": "Gov.pl says ePUAP remains unavailable. The Inowrocław employment office reports that e-Doręczenia is working again while ePUAP still has problems."
    }
  ],
  "body_markdown": "ePUAP handles electronic submissions and mailboxes for public offices across Poland. The digital affairs minister announced on November 10 that officials detected and stopped an attack and that Poland’s Internal Security Agency joined the investigation. A ministry spokesperson described the shutdown as a safety measure in an [interview with Onet](https://www.onet.pl/informacje/onetwiadomosci/epuap-czasowo-wylaczony-powodem-cyberatak-na-panstwowa-usluge/n2cs971%2C79cfc278). The public statements do not identify an exploit, affected versions, stolen data or a confirmed attacker. The national impact comes from loss of access to the filing service."
}