Qbusoft (Medyc) Data Breach
In August 2026, Polish healthcare software vendor Qbusoft, developer of the Medyc medical practice and clinic management system used by outpatient facilities across Poland, was linked to a widespread healthcare data breach after threat actors exploited critical SQL injection and remote database access flaws in internet-facing Medyc installations.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
1 sensitive7- Medical records
- Names
- Dates of birth
- Physical addresses
- Phone numbers
- Email addresses
- Government issued IDs
About This Breach
Compromised patient databases across affected Polish clinics contained full names, 11-digit Polish national identification numbers (PESEL), dates of birth, residential addresses, telephone numbers, email addresses, and clinical consultation and treatment histories.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
