A cyberattack on MyDr, medical scheduling software used by 12,000 Polish clinics, exposed close to 19 million PESEL numbers plus visit and prescription histories.

MyDr is exactly the kind of vendor a small clinic, dental practice or wellness business runs on: one login, one shared database, no in-house security team watching it. The government confirmed the breach on 12 August and is telling every affected person to freeze their PESEL number through mObywatel. If your business hands client or patient data to a single specialist SaaS tool, this is what the failure mode looks like at scale.