profile

Safe Not Scammed

Vastaamo Hacker Sentenced

Published about 1 month ago • 1 min read

Issue #14

Vastaamo Hacker Sentenced

Ahoy there, fellow Netizens!

Before getting to this week’s story, I have a quick announcement. Going forward, I’ll be sending this newsletter out once every two weeks instead of once every week. I hope you’ll continue to enjoy the newsletters, even though they’ll be a little less frequent!

Now, let’s talk about Julius Kivimäki, a 26-year-old Finnish hacker who was sentenced to prison earlier this week for his attack on Finnish psychotherapy provider Vastaamo.

Kivimäki breached Vastaamo in 2018 and stole sensitive patient data, including notes about patient therapy sessions. In 2020, he demanded a payment of 40 Bitcoin from Vastaamo in exchange for him not publishing patient files on the dark web. When Vastaamo refused, Kivimäki contacted individual patients and threatened to release their therapy notes unless they paid a ransom.

Despite some patients paying the ransom, all the files were ultimately released on the dark web. The attacker also accidentally included a copy of his home folder, which helped identify Kivimäki as the perpetrator of the attack.

Given the sensitive nature of the therapy notes, it is not surprising that a number of suicides have been linked to the Vastaamo hack. Kivimäki, however, reportedly claimed while extorting patients that he did not care if they were driven to suicide.

Kivimäki was sentenced to six years and three months in prison, which was just shy of the seven-year maximum prosecutors were aiming for. Several months were knocked off of the maximum sentence since he was willing to pay compensation to the victims.

However, Kivimäki has denied the charges and will probably appeal the ruling.

Until next time, stay safe out there!

113 Cherry St #92768, Seattle, WA 98104-2205
Unsubscribe · Preferences

Safe Not Scammed

Rebecca Morris

Subscribe to my weekly newsletter to keep up with the latest hacks, scams and privacy violations, plus what you can do to protect yourself!

Read more from Safe Not Scammed

Issue #16 Is Recall Worth the Risk? Image made using Canva Ahoy there, fellow Netizens! This week, let’s talk about Microsoft’s latest controversial feature: Recall. Recall is currently available on Microsoft’s AI powered Copilot+ PCs. It allows you to retrace what you were doing on your computer up to three months ago. It does this by taking screenshots every five seconds and storing them locally on your machine, allowing you to explore them later in a timeline format or via search. While...

12 days ago • 1 min read

Issue #15 Be Wary of Google's AI Overview Image made using Canva Ahoy there, fellow Netizens! Today, let’s talk about Google’s AI Overview, which you’ll soon see integrated into Google Search. As its name suggests, AI Overview (previously known as SGE or Search Generative Experience) provides an AI generated summary of the search results for certain queries. And, to make sure you can’t miss it, Google places it right at the top of the search results page. When experimenting with AI Overview,...

26 days ago • 1 min read

Issue #13 The Change Healthcare Ransomware Disaster Image made using Canva Ahoy there, fellow Netizens! This week let’s talk about the train wreck that is the Change Healthcare situation. If you haven’t heard, Change Healthcare suffered a ransomware attack back in February that caused disruption at hospitals and pharmacies around the country. As is common with ransomware attacks, the bad actors also stole data from the health tech giant. UnitedHealth Group, the company that owns Change...

about 2 months ago • 1 min read
Share this post