Estonia's public-sector attack surface measured after September DDoS wave
In September 2026 Estonia's RIA recorded 964 cyber incidents, including DDoS attacks on banking, healthcare, energy, transport and government sites, plus a burst of 86 million requests against the national authentication service. ZoomEye data shows 263 government-sector assets and 135,740 hosts on port 443 in Estonia.
- RIA recorded 964 cyber incidents in September 2026
- Authentication service absorbed 86M requests, over 100x normal load
- ZoomEye: 263 government assets and 135,740 port-443 hosts in Estonia
- Most visible TLS endpoints lack a discoverable domain and escape inventories
Read next
Software