May 06, 2024
Famous hacker sentenced for ransoming psychotherapy patient data
In recent news from Finland, a famous hacker named Aleksanteri Kivimäki has been sentenced to six years and three months in prison. Kivimäki was involved in a troubling case of hacking patient records at the Vastaamo psychotherapy center.
So, what exactly happened? Back in 2018, Kivimäki hacked into the information system of the Vastaamo psychotherapy center. This center served thousands of patients across Finland and operated as a subcontractor for the country’s public health system.
After gaining access to the center’s database of around 33,000 patients, Kivimäki made some disturbing moves. He demanded a large sum of bitcoins from Vastaamo, threatening to publish the patient records if his demands were unmet. When the center refused, Kivimäki took matters into his own hands. In 2020, he began publishing patient information on the dark web and even sent messages to patients, demanding ransom payments.
The court found Kivimäki guilty of aggravated data breach, blackmail attempts, and disseminating private information. Additionally, Vastaamo Center declared bankruptcy in 2021 due to insufficient protection and inadequate data security measures for clients’ medical data2.
As the case unfolds, it raises important questions about cybersecurity and the protection of sensitive data. It serves as a stark reminder of the potential dangers lurking in the digital world and the need for robust security measures to safeguard our information.
In conclusion, the sentencing of Aleksanteri Kivimäki highlights the serious consequences of cybercrime and the importance of protecting our data.
Losing sensitive data can result in a high risk for patients. Vastaamo could have implemented solid encryption security measures and chosen a certified subcontractor like iCure, which implements strong organizational measures. If you would like to learn more about our encryption solutions and how iCure ensures safety, check out our article on encryption and ISO 27001 certification.
