A hacker attack on the network infrastructure took place at the Central Sports Center of the Olympic Preparation Center in Zakopane – informed the COS-OPO authorities. Personal data may have been stolen, including names and surnames, PESEL numbers, addresses, telephone numbers, as well as NIP, REGON and bank account numbers.
“We regret to inform you that there was a breach of personal data protection at the Central Sports Center of the Olympic Preparation Center in Zakopane. The breach consisted in unauthorized access to the COS – OPO network in Zakopane, which resulted in the encryption of data on our servers and the unauthorized deletion of some data. In addition, we identified an unauthorized data transfer, which could have resulted in a leak of personal data. The cause of the event was a hacker attack on our network infrastructure,” the authorities of COS – OPO in Zakopane announced on their website on Sunday.
Personal data of customers and guests may have been compromised
“As a result of this event, the personal data of our clients and guests of the accommodation base may have been violated in the form of: names, surnames, PESEL numbers, residential address, e-mail address, telephone number, and in the case of our Suppliers and Contractors running sole proprietorships, an additional number NIP and REGON as well as bank account number,” it was reported.
As we read in the announcement, the scope of the breached data and the nature of the event result in a high risk of full identification of the person, which results in a high risk of violating his or her rights and freedoms. Due to this attack, third parties may attempt to obtain loans using stolen data from non-bank institutions, i.e. without the need to present an identity document.
Fraudsters may also attempt to conclude civil law contracts with third parties, for example real estate lease, telephone subscription with stolen personal data or to extort insurance funds – it was reported.
COS – OPO in Zakopane informed that appropriate actions were implemented to minimize the effects of the breach and prevent similar situations in the future. The breach was also reported to the President of the Personal Data Protection Office and to CERT Polska. The center also started work aimed at restoring full availability of services.
Main photo source: Pawel Murzyn/East News