Teollimi

Fakturownia.pl data breach

Was I affected?

Fakturownia.pl confirmed a breach affecting an undisclosed number of people, exposing names, addresses, email addresses and phone numbers. You may be affected if you have or had a Fakturownia account, use one as a team member, or are a customer or supplier of a business that invoices through Fakturownia.

Fakturownia.pl breach facts
AnnouncedSep 29, 2026
When it happenedSeptember 27–28, 2026
CountryPoland
Data exposedNames, Addresses, Email addresses, Phone numbers, Passwords, Bank or financial details and Other details
StatusConfirmed by the company or a regulator filing

What happened

Polish online invoicing service Fakturownia said it found on September 28, 2026 that an unauthorized person had accessed its systems from about 3:20 on September 27 until 17:45 on September 28 and copied a large part of its database. The company says every Fakturownia account is affected. Data taken includes company and user names, tax IDs (NIP), addresses, emails and phone numbers, bank account numbers (IBAN), hashed passwords, API tokens and session IDs, invoice amounts, bank balances for accounts using its bank connection, and contractor details entered by customers; full invoice contents were taken only for older invoices. KSeF certificates, bank logins and card details were not taken. Fakturownia reported the breach to the data protection office (UODO), CERT Polska and the police, and began emailing account owners on October 1.

What should I do?

  1. Set a new Fakturownia password, and change it anywhere else you reused it.
  2. Replace API keys used in integrations with Fakturownia.
  3. Confirm any request to pay to a changed bank account by phone, using a number you already knew.
  4. Be wary of invoices and payment reminders that look right but come from new addresses or with new account numbers.
XRedditWhatsApp

Check the other services you use →

Sources