Customers of the Supergrosz website should register their PESEL number. The data leak allows loans to be taken out on their account

The data of some users of the SuperGrosz website was leaked after a hacker attack and ended up in the hands of criminals, Deputy Prime Minister and Minister of Digital Affairs Krzysztof Gawkowski announced on Sunday on the social media platform X. He added that the case is being dealt with by the CSIRT KNF and CSIRT NASK response teams.

CSIRT KNF and CSIRT NASK are computer security incident response teams operating within the Polish national cybersecurity system.

“The situation is very serious because the data obtained by an unauthorized person includes:

• e-mail addresses, names and surnames,
• information about nationality,
• PESEL numbers,
• ID card details,
• addresses of residence or stay and correspondence addresses,
• telephone numbers, information about being married,
• information about the number of children,
• data regarding professional status,
• name, address, tax identification number and telephone number of the employer,
• declared industry,
• declared income,
• bank account numbers,
• Facebook ID”

– wrote Gawkowski on X.

⚠️ ANOTHER HACKER ATTACK ⚠️

Warning for customers of the Supergrosz website (run by AIQLABS sp. z o. o.). As a result of the security incident, some users' data ended up in the hands of criminals.

CSIRT KNF and CSIRT NASK are already working on the case. The President was notified…

— Krzysztof Gawkowski (@KGawkowski) November 2, 2025

As he said, the case is already being dealt with by the CSIRT KNF and CSIRT NASK response teams, and the President of the Personal Data Protection Office has been notified. Services are underway to identify the perpetrators.

The Deputy Prime Minister announced that soon everyone will be able to check whether their data is among those disclosed via the websitebezpieczdane.gov.pl.

Gawkowski appealed to SuperGrosz customers to be especially careful – block their PESEL number in the mObywatel application, change login passwords and enable two-factor authentication on all accounts.

“Such hacker attacks are becoming an everyday occurrence. Every company and institution should be as prepared as possible for them! Each of us must be particularly careful and sensitive to fraud attempts on the Internet. This is where criminals move and where entire organized groups operate,” emphasized the Minister of Digital Affairs.

The SuperGrosz website is run by AIQLABS and offers quick online loans.

The SuperGrosz website contains information that the President of the Office of Competition and Consumer Protection has recognized the activities of AIQLABS as practices violating the collective interests of consumers, including: on the use of non-interest loan costs in consumer loan agreements, which constitutes entrepreneur's behavior contrary to good practices and harms the collective interests of consumers. (PAP)

pif/mark/