Estonian Citizens (via Estonian Cybercrime Bureau) data breach: 655K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2018-06-11
In June 2018, the Cybercrime Bureau of the Estonian Central Criminal Police contacted HIBP and asked for assistance in making a data set of 655k email addresses searchable. The Estonian police suspected the email addresses and passwords they obtained were being used to access mailboxes, cryptocurrency exchanges, cloud service accounts and other similar online assets. They've requested that individuals who find themselves in the data set and also identify that cryptocurrency has been stolen contact them at cybercrime@politsei.ee. Exposed data: email addresses, passwords. The breach dates from Jun 7, 2018; Have I Been Pwned loaded it on Jun 11, 2018.
What to do
- If you had a Estonian Citizens (via Estonian Cybercrime Bureau) account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch