October in cyberspace: disruptions to e-services, data breaches and critical vulnerabilities
In October, Estonia’s state authentication service experienced disruptions, as did the services of the Ministry of the Interior’s Information Technology and Development Centre (SMIT) on two occasions. A failure of the trust list managed by the European Commission affected, among other things, digital signing and the health information system. RIA was also notified of data breaches: approximately 9,000 customers’ personal and booking data leaked from the systems of a company providing booking solutions to accommodation establishments, and up to 5,000 users’ personal data leaked from a classifieds portal. Critical vulnerabilities were also disclosed in widely used PHP and GitLab software, and RIA warned about fake job offers circulating on LinkedIn.
CERT24