Polish Payment Service Autopay Hit by Cyberattack, Card Data Potentially Exposed

Reform.news · 16 November 2026, 01:33

https://reform.news/en/polish-payment-service-autopay-hit-by-cyberattack-card-data-potentially-exposed/

Polish online payment operator Autopay has warned customers that unauthorized parties may have gained access to their bank card data following a cyberattack. The company has not yet disclosed how many people may have been affected. According to Autopay, the group’s services are used by 15 million people and 50,000 businesses.

The company detected unauthorized access to its infrastructure and some data relating to processed payments on November 11, according to an Autopay statement. The operator said it had blocked the unauthorized access, strengthened its monitoring systems and notified Poland’s Personal Data Protection Office, the police and the cybersecurity incident response team of the Polish Financial Supervision Authority (CSIRT KNF).

In a notification sent to users, a copy of which was obtained by Reform.news, Autopay warned that email addresses, IP addresses and payment card data may have been accessed. If a payment involved topping up a mobile phone account, the incident may also have affected the phone number. The company did not specify which card details may have been exposed.

“So far, we have not confirmed that any data was copied or used. However, we cannot completely rule this out,” the notification said.

The company is directly notifying everyone whose data may have been affected. The full scale of the incident is still being investigated.

Autopay recommends that customers check their card transaction histories and immediately report any unfamiliar charges to their banks. The company also warns of potential fraudulent emails, phone calls and text messages referring to the incident.

Autopay processes payments for online stores, telecommunications services, utilities and toll roads.