Notice Regarding a Data Security Incident
Dear Customers and Users,
As part of our commitment to transparency and the security of your data, we wish to inform you of a recent security incident.
What happened?
On September 23, 2026, we detected unauthorized access to a portion of the data stored in our system.
The incident, which affected only a single email account, was immediately blocked, and our systems have been further secured.
What data was affected?
The matter concerns only a limited set of less sensitive contact and business information. The unauthorized access may have involved the following details:
- Full name
- Email address
- Company name
- Content of a submitted inquiry or price request
Important: The database did not contain any highly sensitive data, such as user passwords, national identification numbers (PESEL), ID card numbers, payment card details, or medical records. This data remained secure as it was not included in the inquiry content.
What does this mean for you?
A leak of this type of data does not carry a risk of financial identity theft (e.g., taking out a loan). The primary risk involves the potential for receiving an increased volume of unsolicited messages (spam) or phishing attempts (fraudulent emails impersonating our company or other entities to solicit further information).
What actions have we taken?
Immediately upon detecting the incident, we implemented crisis procedures:
- We secured our systems and closed the vulnerability that allowed access.
- We reported the incident to the Personal Data Protection Office (UODO) in accordance with applicable GDPR regulations.
- We initiated a detailed internal security audit and are preparing for a dedicated audit and training session with external IT experts.
What can you do? (Recommendations)
We ask that you exercise heightened vigilance when receiving emails. Pay particular attention to:
- Messages from unusual email addresses that impersonate contacts or mimic addresses associated with our company.
- Requests to click on suspicious links, download attachments, or provide passwords/login credentials (we never ask for this in emails).
Contact
If you have any questions or concerns regarding your data, our Personal Data Protection Administrator is available to assist you at the following email address: kj ( e t) ferrox-electric.pl
We sincerely apologize for this situation. The security of your data is our priority, and we are drawing important lessons from this incident for the future.
Sincerely,
Krzysztof Jakimiak – Owner
