Public gov.pl announcement kind of confirms the leaks were legitimate - and includes rather ridiculous statement about "helping the victims with securing their email" - as a reminder, these officials likely violated Polish law and gov operational procedures.

Presenting them as "victims" is just about as accurate as with someone knowingly driving on a public road in a car with no brakes 🤷

And it's not new - infosec community has been talking about it for years.

https://www.gov.pl/web/premier/oswiadczenie-wiceprezesa-rady-ministrow-przewodniczacego-komitetu-ds-bezpieczenstwa-narodowego-i-spraw-obronnych-jaroslawa-kaczynskiego2