Estonian Citizens (via Estonian Cybercrime Bureau) Data Breach

What happened

In June 2018, the Cybercrime Bureau of the Estonian Central Criminal Police contacted HIBP and asked for assistance in making a data set of 655k email addresses searchable. The Estonian police suspected the email addresses and passwords they obtained were being used to access mailboxes, cryptocurrency exchanges, cloud service accounts and other similar online assets. They've requested that individuals who find themselves in the data set and also identify that cryptocurrency has been stolen contact them at cybercrime@politsei.ee.

Exposed data

Recommended actions

• Change your Estonian Citizens (via Estonian Cybercrime Bureau) password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Estonian Citizens (via Estonian Cybercrime Bureau) — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.