● FOREWORD ESTONIA’S CYBERSECURITY starts with you How can we tackle the record number of cyberattacks and security vulnerabilities Estonia faced last year? The answer starts with individual responsibility – strengthening your own defences first, then helping those around you, writes Gert Auväärt, Director of NCSC-EE and Deputy Director-General of RIA. L et’s begin on a positive note. Last year brought significant technological advances that opened new opportunities in both the economy and in research. However, this progress relies on increasingly complex digital infrastructure, which also creates more opportunities for cybercriminals. A decade ago, few could have predicted the scale that cybercrime would reach. Today, it ranks as the world’s third-largest ‘economy’, behind only the United States and China. We have reached a point where cybersecurity must be seen as a basic necessity for individuals, businesses and states alike. Just as you make sure your wallet and keys are secure before leaving home, the same level of caution should apply when using a smartphone or computer to protect your data and assets. DEFENDING ESTONIA’S DIGITAL BORDERS RIA develops and manages the core foundations of Estonia’s digital state while also acting as the backbone of national cybersecurity. RIA responds to threats, prevents incidents and 6 safeguards Estonia’s digital borders. To ensure the resilience of Estonia’s digital society, cybersecurity must be strategically embedded across all sectors and adapted to local needs within international cooperation efforts. Alongside protecting state services, RIA also bolsters critical infrastructure and raises public awareness of cyber threats. The new Estonian Cybersecurity Strategy 2024–2030 is focused on achieving these objectives. In light of the changing security landscape, we must review cybersecurity, information security and crisis management laws to uphold best practices and guarantee the uninterrupted operation of Estonia’s services. A RECORD YEAR FOR CYBERATTACKS In 2024, RIA registered a record 6,515 cyber incidents with an impact in Estonia. Globally, a record-breaking 40,287 security vulnerabilities were identified – each a potential entry point for cyberattacks. These are not just numbers; they are a warning that cybercriminals have more opportunities than ever, the attack surface is expanding, and the overall threat landscape is deteriorating. CYBER SECURITY IN ESTONIA 2025