Polish MP's personal data illegally accessed from state registries; prosecution drops case despite ABW evidence
Sławomir Mentzen learned that a local official had accessed his PESEL and ID records, but the investigation was closed because the official left her password on a sticky note.
What happened
On 27 March 2025, Marzena O., an employee of the Municipal Office in Aleksandrów Łódzki, accessed the personal data of MP Sławomir Mentzen in the PESEL register and the Identity Card Register (RDO). The access was unauthorised. Mentzen said he would never have known about the breach had the Internal Security Agency (ABW) not flagged it.
I would like to thank someone at ABW who took an interest in the matter, detected the official and informed the prosecutor's office. The state worked at that moment.
Prosecution and its collapse
The prosecutor's office filed charges against the official but later dropped the case, citing inability to identify the perpetrator. According to Mentzen, the official denied accessing his data and explained that she kept her password written on a piece of paper under a calendar on her desk. She never logged out and left her access card permanently in the reader, so colleagues, visitors and even remote IT staff could have used her terminal.
This is a state made of crap and sticks, of soaked cardboard. Officials break the law, commit crimes and then explain that it wasn't them, that they just don't give a damn about the security of Poles' data, which the prosecutor's office finds a perfectly understandable reason to discontinue the investigation.
Security of public data
The case exposed procedures that fall short of basic information security standards. Superiors testified that employees log into systems with personal access cards secured by passwords and that cards are to be kept under lock and key after work. The official's practice of leaving credentials in plain sight and a logged-in session unattended contradicted those rules.
Lawyer Bartosz Lewandowski, commenting on the decision, wrote on platform X:
The state does not function.
Mentzen demanded that every citizen be notified via the mObywatel app whenever an official queries their data, arguing that only such transparency can end the impunity of civil servants.
