Polish Convenience Store Chain Żabka Hacked Through Third-Party Account

Summary

Polish convenience store chain Żabka, one of the largest retail networks in Poland, confirmed it was hacked after attackers compromised a third-party account with access to its systems. The breach affected Żabka's approximately 10,000 stores across Poland.

Details

Attackers gained access to internal systems via a third-party vendor account. The incident underscores the persistent supply chain risk in retail, where third-party vendor access creates a broad attack surface across large store networks. The compromise of a single vendor account cascaded across Żabka's entire network of approximately 10,000 stores, illustrating the concentrated risk inherent in managed service provider and vendor access models. This echoes similar Supply Chain attacks seen across the retail sector globally.

Sources

• The Record
• raw/digests/Cyber-Digest-2026-08-05