What Happened
On January 23, 2026, Polish online printer supplies retailer DrTusz (drtusz.pl) detected unauthorized access by an external party to the system handling customer email correspondence, resulting in a data breach. The incident affected email addresses of correspondents and led to loss of confidentiality of associated personal data, specifically names, surnames, email addresses, and potentially any personal data contained in email message content. The company explicitly stated that payment data and financial information were not compromised. DrTusz reported the breach to the Polish data protection authority (UODO) and implemented remedial measures, including fully blocking external access to the affected system, performing an additional security audit, and strengthening technical safeguards and staff awareness, while warning affected individuals about the risk of misuse of their data and possible phishing or fraud attempts. No public source specifies the exact number of records involved in this breach.
