CERT Estonia, the organization responsible for the management of security incidents in .ee computer networks, informed nearly 200,000 Estonians via their employers that their social media passwords had been leaked. According to RIA, a database was created in Dark Web, containing 1.4 billion user information and a password in the open form. The database also contains email addresses with more than 190,000 ending in .ee.

For each institution, CERT sent a list of individual email addresses. “For example, if there were people from national broadcasting, let’s say mari.maasikas@err.ee, then we sent information to the head of ERR’s information security that the passwords of these people have leaked.” explained Mägi.

The number of Estonians at risk is much bigger, since most of the personal e-mail accounts are not using .ee domain. Some Good Samaritan could instead send out direct warning e-mails to all of the addresses in the database.

Links:
http://news.err.ee/648949/200-000-estonians-social-media-passwords-breached
https://geenius.ee/uudis/200-000-eestlase-sotsiaalmeedia-konto-murti-lahti/
https://www.ria.ee/ee/tumeveebis-avaldati-14-miljardi-kasutaja-paroolide-seas-ka-eesti-inimeste-paroolid.html
https://geenius.ee/uudis/eesti-kuberkaitsja-tegelikult-voib-eestist-lekkinud-paroole-olla-palju-rohkem-kui-200-000/
https://medium.com/4iqdelvedeep/1-4-billion-clear-text-credentials-discovered-in-a-single-database-3131d0a1ae14