In 2018, hackers infiltrated the servers of Vastaamo Psychotherapy Center, a Finnish mental healthcare provider, exposing the deeply personal data of 33,000 patients, including sensitive therapy notes. The breach, perpetrated by Julius Kivimäki, wasn’t simply a theft of information; it escalated into a criminal extortion attempt targeting both patients and the company itself, demanding payment in Bitcoin to prevent the release of confidential records.
The Vastaamo attack, detailed in BBC cyber correspondent Joe Tidy’s new book, Ctrl + Alt + Chaos: How Teenage Hackers Hijack the Internet, exemplifies a growing trend: the increasing involvement of younger individuals in sophisticated cybercrime. Tidy argues that these aren’t the stereotypical, genius-level hackers often portrayed in popular culture, but rather persistent, socially connected individuals, sometimes struggling with addiction, who are causing significant harm through data breaches and fueling a cycle of escalating attacks.
The difficulty in assessing the impact of data breaches is a key concern, Tidy notes. Individuals often assume their compromised data – phone numbers, email addresses – is already widely available, diminishing their sense of risk. Although, the Vastaamo case demonstrates the uniquely damaging potential of stolen personal information, particularly when it involves sensitive medical records. For patients already grappling with mental health challenges, the exposure of their therapy notes created a particularly cruel and vulnerable situation.
Kivimäki attempted to extort Ville Tapio, the CEO of Vastaamo, for 100,000 euros worth of Bitcoin, according to Tidy. The incident highlights the financial motivations driving many cyberattacks, and the willingness of criminals to exploit personal vulnerabilities for profit. The BBC has reported extensively on the rise of ransomware attacks and the increasing sophistication of cybercriminal organizations, including groups like Evil Corp, whose activities have been the subject of a recent Cyber Hack podcast series.
Tidy’s reporting, including investigations into Russia’s most wanted cybercriminals, underscores the global nature of cybercrime. A recent BBC report detailed how criminals offered a reporter money to hack the BBC itself, demonstrating the brazenness and reach of these operations. Another BBC investigation examined the tactics used by hackers targeting companies like Marks & Spencer and the Co-op, revealing the methods employed to gain access to sensitive data. A jailed hacking kingpin recently revealed details about a destructive gang, as reported by the BBC, offering further insight into the structure and operations of these criminal networks.
The Vastaamo case remains a significant event in the landscape of cybercrime, and the Finnish authorities continue to investigate the full extent of the damage and pursue those responsible. The incident serves as a stark reminder of the real-world consequences of data breaches and the evolving threat posed by a new generation of hackers.
