The police are seeking Moroccan citizen Adrar Khalidi. He is suspected of unauthorized access and data theft from the Allium UPI customer card system.
The suspect gained access to the database using an account with administrator privileges. How he obtained the password is still unclear.
Reemo Salupõld, head of the cybercrime bureau of the Central Criminal Police, explained: 'This shows that today, a strong password alone is not enough. We recommend using two-factor authentication, which adds an extra layer of protection to accounts.'
The police have not yet found that the stolen data has been misused. The suspect has been declared internationally wanted and may be extradited to Estonia if arrested in any country.
Over the past year, the Central Criminal Police has identified several major cyberattacks. Other individuals suspected of major cybercrimes have also been declared wanted.