Fakt

Fakturownia, a Polish invoicing platform used by more than 600,000 businesses, says an attacker spent roughly 38 hours inside its servers on 27-28 September and copied a large part of its database. Exposed data reportedly includes account details, password hashes, bank account numbers and integration tokens. Security professionals are sharing the disclosure and urging affected users to change passwords and review integrations.