Vastaamo psychotherapy data breach and patient extortion (Finland, 2020)
Records on approximately 33,000 patients of Finnish psychotherapy provider Vastaamo were stolen in 2018 from an unencrypted database with no root password. After failed company-extortion in October 2020, the attacker sent ransom demands to ~30,000 patients directly. Founder later acquitted; Aleksanteri Kivimäki convicted and sentenced to 6 years 3 months.
- Victim
- Vastaamo (Finnish psychotherapy centre)
- Loss
- $670.0K
- Records
- 33.0K