Polish Ministry of Finance addresses cybersecurity concerns regarding KSeF invoice data handled by private company Imperva.
Ministry’s Security Assurance
The Ministry of Finance reassures that data from structured invoices is properly encrypted and therefore will be secure.
Private Company Concerns
An internet user pointed out that the Ministry of Finance is using solutions offered by a private entity that will have access to data from invoices issued using KSeF. This refers to the American company Imperva (specializing in cybersecurity), which belongs to the French conglomerate Thales.
Expert Warnings on Encryption
Experts, however, point to another problem – the encryption method for data stored in KSeF chosen by the ministry. According to Adrian Lapierre, Managing Director at ITrust, this system does not prevent hacker attacks and potential data leaks.