Estonian police arrested a Tallinn man on suspicion of exploiting a government photo transfer service vulnerability to download ID scans of 286,438 Estonians from the Identity Documents Database (KMAIS) The attacker was apprehended on July 23, following a Cybercrime Bureau of the National Criminal Police and RIA joint investigation that started after RIA was alerted of a higher than the usual number of queries. Stolen info cannot be used to perform notarial or financial transactions or gain access to state digital services by impersonating individuals.
Source: https://www.bleepingcomputer.com/news/security/estonia-arrests-hacker-who-stole-286k-id-scans-from-govt-database/