Verified cyberincident context · Estonia / RIA/CERT-EE 2024
Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
Market context — not industry-specific evidence
Estonian Information System Authority (RIA) / CERT-EE annual report context (Cyber Security in Estonia 2025, published 18 February 2025) states that 6,515 cyber incidents with impact in Estonia were recorded in 2024. Among the recorded categories: 4,224 phishing and scam websites were discovered, 637 service disruptions recorded, 624 fraud cases involving losses registered, 565 malicious redirects recorded, 134 account takeovers recorded, and 68 data leak cases recorded. RIA/CERT-EE also sent 7,955 alerts to owners of vulnerable websites or devices in 2024, of which 2,462 concerned WordPress web management software and plug-ins and 263 concerned the Magento e-commerce platform. These figures are RIA/CERT-EE 2024 reporting context; they are not total Estonian business incident prevalence, not a national incident census, and not industry-specific evidence. The 7,955, 2,462, and 263 values are notification alerts, not confirmed compromises, breached organisations, or proof of protection.
Cyber incidents with impact recorded by RIA/CERT-EE — Estonia 2024
- Cyber incidents with impact recorded by RIA/CERT-EE in Estonia in 2024
- 6,515
- Unit
- cyber incidents with impact recorded by RIA/CERT-EE in Estonia in 2024
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
Estonia RIA/CERT-EE annual report context states that 6,515 cyber incidents with impact in Estonia were recorded in 2024.
RIA/CERT-EE 2024 reporting context only. This is a count of cyber incidents with impact as recorded by RIA/CERT-EE in Estonia in 2024 and must not be presented as total Estonian business incident prevalence, hidden incident prevalence, population-wide victimisation rate, all-sector incident rate, or industry-specific evidence.
Selected incident categories — RIA/CERT-EE Estonia 2024
- Phishing and scam websites discovered
- 4,224
- Unit
- phishing and scam websites discovered by RIA/CERT-EE in Estonia in 2024
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
- Service disruptions recorded
- 637
- Unit
- service disruptions recorded by RIA/CERT-EE in Estonia in 2024
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
- Fraud cases involving losses registered
- 624
- Unit
- fraud cases involving losses registered by RIA in Estonia in 2024
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
- Malicious redirects recorded
- 565
- Unit
- malicious redirects recorded by RIA/CERT-EE in Estonia in 2024
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
- Account takeovers recorded
- 134
- Unit
- account takeovers recorded by RIA/CERT-EE in Estonia in 2024
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
- Data leak cases recorded
- 68
- Unit
- data leak cases recorded by RIA/CERT-EE in Estonia in 2024
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
RIA/CERT-EE 2024 reporting context only. These are counts of selected incident categories as recorded by RIA/CERT-EE in Estonia in 2024. They are not independent totals summing to the overall impact incident count, not total Estonian business incident prevalence, and not industry-specific evidence for the sector shown on this page.
Vulnerable-asset alerts sent by RIA/CERT-EE — Estonia 2024
- Total alerts sent to owners of vulnerable websites or devices
- 7,955
- Unit
- alerts sent by RIA/CERT-EE to owners of vulnerable websites or devices in Estonia in 2024
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
- Of those, concerning WordPress web management software and plug-ins
- 2,462
- Unit
- of the 7,955 RIA/CERT-EE vulnerability alerts, those concerning WordPress web management software and plug-ins in 2024 — subset of total alerts, not an independent count
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
- Of those, concerning the Magento e-commerce platform
- 263
- Unit
- of the 7,955 RIA/CERT-EE vulnerability alerts, those concerning the Magento e-commerce platform in 2024 — subset of total alerts, not an independent count
- Period
- Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context.
- Scope
- Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context
The 2,462 WordPress and 263 Magento values are subsets of the 7,955 total alerts; they must not be treated as independent figures or added together.
RIA/CERT-EE 2024 reporting context only. These are notification alerts sent to owners of vulnerable websites or devices and must not be presented as confirmed compromises, breached organisations, resolved incidents, protected organisations, or proof of protection. The WordPress and Magento figures are subsets of the total alert count, not independent measures. Not total Estonian vulnerability prevalence and not industry-specific evidence.
Source: Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025
Scope: Estonian Information System Authority (RIA) / CERT-EE annual report context published 18 February 2025. All admitted indicators describe RIA/CERT-EE 2024 recorded context only. The 6,515 impact incident count covers incidents with impact as defined by RIA/CERT-EE reporting methodology and must not be presented as total Estonian business incident prevalence, hidden incident prevalence, or population-wide victimisation. The selected category counts (phishing/scam websites, service disruptions, fraud, malicious redirects, account takeovers, data leaks) are sub-categories of RIA/CERT-EE reporting and are not independent totals summing to 6,515. The 7,955 alert count refers to alerts sent to owners of vulnerable websites or devices; the 2,462 and 263 values are subsets of this total and must not be treated as independent figures. These figures do not measure total Estonian business incident prevalence, hidden incident prevalence, population-wide victimisation rates, annual all-sector incident totals, industry-specific evidence, compliance achievement, certification or security outcomes.
Methodology: Official Estonian Information System Authority (RIA) / CERT-EE annual report context published 18 February 2025. The admitted indicators describe RIA/CERT-EE 2024 recorded impact incidents, phishing and scam websites discovered, service disruptions, fraud cases involving losses, malicious redirects, account takeovers, data leak cases, and alerts sent to owners of vulnerable websites or devices. The 7,955, 2,462, and 263 values are notification alerts and must not be presented as confirmed compromises, breached organisations, resolved incidents, protected organisations, or proof of protection. The 2,462 WordPress and 263 Magento values are subsets of the 7,955 total alert count and must not be treated as independent figures that can be summed or compared with the total. Do not present any admitted indicator as total Estonian business incident prevalence, hidden incident prevalence, population-wide victimisation rate, all-sector incident rate, industry-specific evidence, compliance achievement, certification, proof of security, or guaranteed protection.
Accessible data table
| Metric | Value | Source | Scope | Reporting period |
|---|---|---|---|---|
| Cyber incidents with impact recorded by RIA/CERT-EE in Estonia in 2024 | 6,515 cyber incidents with impact recorded by RIA/CERT-EE in Estonia in 2024 | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |
| Phishing and scam websites discovered | 4,224 phishing and scam websites discovered by RIA/CERT-EE in Estonia in 2024 | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |
| Service disruptions recorded | 637 service disruptions recorded by RIA/CERT-EE in Estonia in 2024 | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |
| Fraud cases involving losses registered | 624 fraud cases involving losses registered by RIA in Estonia in 2024 | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |
| Malicious redirects recorded | 565 malicious redirects recorded by RIA/CERT-EE in Estonia in 2024 | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |
| Account takeovers recorded | 134 account takeovers recorded by RIA/CERT-EE in Estonia in 2024 | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |
| Data leak cases recorded | 68 data leak cases recorded by RIA/CERT-EE in Estonia in 2024 | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |
| Total alerts sent to owners of vulnerable websites or devices | 7,955 alerts sent by RIA/CERT-EE to owners of vulnerable websites or devices in Estonia in 2024 | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |
| Of those, concerning WordPress web management software and plug-ins | 2,462 of the 7,955 RIA/CERT-EE vulnerability alerts, those concerning WordPress web management software and plug-ins in 2024 — subset of total alerts, not an independent count | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |
| Of those, concerning the Magento e-commerce platform | 263 of the 7,955 RIA/CERT-EE vulnerability alerts, those concerning the Magento e-commerce platform in 2024 — subset of total alerts, not an independent count | Estonian Information System Authority / RIA, Cyber Security in Estonia 2025, 18 February 2025 | Estonia RIA/CERT-EE 2024 recorded incident and vulnerable-asset alert context | Estonia RIA/CERT-EE 2024 impact-incident, phishing/scam website, fraud, service disruption, data leak, account takeover and vulnerable-asset notification context. |