The National Health Fund is reporting a new phishing campaign in which cybercriminals are impersonating medical services provided by the e-Health Center. Their goal is to phish for personal information and login credentials of health care workers. Fake e-mails and text messages direct to sites confusingly similar to official services such as Internet Patient Account (IKP) or gabinet.gov.pl. Clicking on such a link can result in a serious data security breach.
Beware of fake news! NFZ warns of phishing campaign targeting medical facilities
Published April 16, 2025 11:51
fot. iStock
How do scammers operate?
Medical facilities and health care workers are receiving crafted messages that at first glance may look like official correspondence from the e-Health Center. They contain links redirecting to sites imitating well-known medical applications.
Clicking on such a link may result:
- Theft of personal information,
- The acquisition of login data,
- A threat to the security of the facility's information system.
How do you recognize a fake message?
The following warning signs are worth noting:
- The sender is unknown or arouses suspicion.
- The sender's email address is only similar to the official one, such as:
p1-health[.]eup1-health[.]onlinegabinetlekarski[.]info
- The message contains linguistic and stylistic errors.
- The appearance of the linked page resembles an Internet Patient Account or gabinet.gov.pl.
- There is an urgent request for action, including:
- downloading an attachment (e.g., a PDF file, photo or program),
- providing personal or login information.
- The e-mail address when you click "reply" is different from the previously visible sender.
What to do in case of suspicion?
- Do not click on suspicious links and do not open attachments.
- Do not provide any personal or login information.
- Consult your IT department or verify the message on official websites of public institutions.
Source: NFZ
Topics
Ochrona zdrowia / NFZ / Phishing / Centrum e-Zdrowia / Cyberprzestępczość / Bezpieczeństwo danych / Danych osobowych / IKP












