Hacker attack on Krakow's MPK

The outage has been going on since Tuesday. It affected, among others, the ticket sales system and the MPK Kraków website. According to the company, it was the result of an attack carried out by an international hacker group. On Thursday morning, Krakow MPK spokesman Marek Gancarczyk said that “there is neither bad nor good news.” – I have no confirmation that there was a data leak, and it has not yet been possible to restore the operation of IT systems, he said.

In turn, Rafał Świerczyński, president of MPK Kraków, informed that at the same time there was another attempt to disrupt the operation of public transport in Kraków, but he did not reveal what it was about.

According to a statement sent by the Municipal Communication Company, the hacker attack was carried out early on Tuesday morning. “The information obtained shows that this is an international hacker group carrying out attacks on companies on commission,” the statement said.

Due to the scale and nature of this hacker attack, Krakow's MPK reported the matter to the police and the relevant state services dealing with cybersecurity.

At the same time, the carrier sent a notification to the President of the Personal Data Protection Office about the potential theft of personal data of MPK employees and passengers. “There is currently no confirmation that such a theft has occurred. However, we have decided to notify all interested persons about such a risk. If a breach of data confidentiality is detected, we will inform persons potentially affected by it in a separate message,” the statement said.

The carrier asks all customers, co-workers and employees who have data in its system to pay special attention to strange and unusual e-mails, telephone calls and contact attempts. It is also recommended to reserve your PESEL number.

“The mode and scale of the hacker attack indicate that the main goal of the operation was the operational paralysis of Krakow's public transport. We would like to assure you that MPK has used the procedures developed for such situations and maintains uninterrupted operation of the depot and service stations. We assure you that MPK continues to provide transport services in full scope,” it was noted.

According to the carrier, work is currently underway to launch IT systems in stages, taking into account the highest level of security. In this respect, the company cooperates with specialized companies, IT service providers and units of the Krakow City Hall.

Currently, season tickets can be purchased in the iMKA mobile application and in machines installed in vehicles and in KKM ticket machines – in these devices you can pay by payment card and cash. If you wish to purchase tickets for validation, you can also do so in mobile applications (mPay, iMKA, moBiLET, SkyCash, jakdojade or zbiletem.pl (common 70-minute tickets in the applications: iMKA and mPay). Ticket inspectors during inspections in trams and buses respect all payment confirmations, including e-mail ones.

Currently, the only possible and fastest form of contact with MPK is the hotline – 12 19 150. Passengers can also submit their comments on our social networking sites on Facebook and the X portal.