Estonia Takes Drastic Measures to Prevent Identity Theft
In a bid to plug a security loophole that could allow attackers to decrypt private data or impersonate citizens, Estonia has announced it will block thousands of its citizens from accessing online government services starting Saturday. The move comes after a problem with the country’s national identity cards was identified earlier this year, affecting 760,000 people.
The Flaw in Estonia’s ID Cards
A security flaw was discovered by researchers, which lies in the encryption used in the ID cards. This makes them vulnerable to decryption and potential impersonation. The issue affects a significant portion of Estonia’s population, with 760,000 citizens impacted.
Effects on Citizens
- Thousands of Estonian citizens will be unable to access online government services starting Saturday.
- Only ID cards that have been updated with new security certificates will be able to access certain online services.
Consequences for the Country
Estonia’s digital ID system allows citizens to access a wide range of government and private services, including:
- Medical records
- Voting
- Banking
The country’s Prime Minister Juri Ratas emphasized the severity of the threat: “As far as we currently know, there has been no instances of e-identity theft, but the threat assessment of the Police and Border Guard Board and the Information System Authority indicates that this threat has become real.”
Citizens’ Frustration
Some citizens had reported delays in updating their ID cards due to overloaded online services. Britain’s ambassador to Estonia, Theresa Bubbear, took to social media to express her frustration:
Spent hours over two days trying to update my ID card as per govt/ MFA instructions. Still trying…
Government Response
The Estonian government has announced that only essential services will be available for updating digital IDs online this weekend. The system will reopen to all citizens on Monday.
- Deadline for updating all cards: March 2018
Prime Minister Ratas stressed the importance of addressing the issue:
The functioning of an e-state is based on trust and the state cannot afford identity theft happening to the owner of an Estonian ID card.