Security Notice for Customers and Business Partners

Information about a cybersecurity incident at the external invoicing software provider used by our company.

27–28 September 2026incident at an external provider – Fakturownia.pl
Our systems are safeour company IT infrastructure was not affected
Bank account unchangedour bank account number has not changed

Dear Customers and Partners,

In keeping with the highest standards of security and transparency, we would like to inform you that on 27–28 September 2026 a cybersecurity incident occurred at the external provider of the invoicing software used by our company – Fakturownia sp. z o.o. (the Fakturownia.pl service).

1What happened and what data was involved?

As a result of an attack on the servers of the Fakturownia.pl operator, unauthorised persons gained access to part of the service’s databases. The incident was entirely independent of our infrastructure – our company IT systems were not compromised.

The incident may have involved basic identification and address data shown on invoices (such as first and last name / company name, address, tax ID (NIP), email address or data from past invoices).

The breach did NOT involve phone numbers, sensitive data, PESEL numbers, payment card details, etc.

2What action has been taken?

The software provider (Fakturownia.pl) promptly closed the security gap, secured its systems and reported the matter to the Central Cybercrime Bureau (CBZC), the CERT Polska team and the President of the Personal Data Protection Office (UODO).

Our company has also completed all reporting formalities with the President of UODO. The analysis carried out showed no high risk to the rights or freedoms of individuals, and to date no publication or misuse of the data has been recorded.

3What should you watch out for? (Preventive recommendations)

We recommend taking the usual precautions in electronic communication and paying attention to:

  1. Fake payment requests and forged invoices – especially emails claiming that the bank account number for payments has changed. We stress that our company’s bank account number has not changed.
  2. Phishing attempts – suspicious emails asking for an urgent additional payment, to click a link or to open an unusual attachment.
  3. Unsolicited commercial offers (spam) sent to the email address you previously provided for invoicing.

If you receive any doubtful message related to payments or invoices from our company, please verify it by contacting us directly at: info@motionracestudio.pl

Thank you for your trust. The Motion Race Studio team