CVE Index中文
L3 · ShartedePUAP · government · service disruptionepuap-service-outage

Poland takes ePUAP government mailboxes offline after stopping a cyberattack

Poland’s digital affairs minister says an attack on ePUAP was detected and stopped. The government took the nationwide filing platform offline as a precaution. Public notices confirm service disruption but do not establish a data breach.

Disclosed
Nov 10, 2026
Public disclosure date
Severity
Sharted
No CVE: a breach, not a bug
Splash zone
Citizens, businesses and public offices using Poland’s ePUAP mailboxes or services that depend on them.
ePUAP · government · service disruption
In the wild
Unknown
Officials confirm a stopped attack; successful exploitation has not been established.

What happened

ePUAP handles electronic submissions and mailboxes for public offices across Poland. The digital affairs minister announced on November 10 that officials detected and stopped an attack and that Poland’s Internal Security Agency joined the investigation. A ministry spokesperson described the shutdown as a safety measure in an interview with Onet. The public statements do not identify an exploit, affected versions, stolen data or a confirmed attacker. The national impact comes from loss of access to the filing service.

Crime-scene timeline

  1. Nov 10, 2026

    Poland announces that an attack on ePUAP was stopped

    The digital affairs minister says technical teams are working to restore full functionality.

  2. Nov 12, 2026

    Official notices describe continuing ePUAP disruption

    Gov.pl says ePUAP remains unavailable. The Inowrocław employment office reports that e-Doręczenia is working again while ePUAP still has problems.

Who said what

We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.