PrivacySignal
Breach

Finland issues wanted notice for hacker behind massive psychotherapy data breach

The Record · · International · Data Breaches

Finnish authorities have issued a wanted notice for Julius Kivimäki, the hacker accused of breaching a psychotherapy provider's database and exposing the private session records of tens of thousands of patients. His lawyer has said he does not know his client's whereabouts but believes Kivimäki has left Finland.

Why this matters: This breach was about as intimate as data gets. Therapy notes. What people said in private to a mental health professional. Kivimäki allegedly stole that information and then tried to extort the patients directly. Now he appears to have fled. That gap between the harm already done and the accountability still pending is the problem. Victims cannot unshare their records. Whether Finland can actually find and prosecute him will say something real about how seriously these cases are pursued when the suspect crosses a border.

Who should care: Cybersecurity · Privacy officers · Administrators

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

Breach
CyberScoop · · US Federal

ATF confirms cyberattack hit system containing info on its investigation targets

The prolific ransomware group Qilin claimed responsibility for the attack. ATF insists the incident was limited to a standalone system and hasn’t impacted critical operations. The post ATF confirms cyberattack hit system containing info on its investigation targets appeared first on CyberScoop.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#security Read original →
Breach
DataBreaches.net · · International

Winona County paid more than $128K following January ransomware attack

WXOW in Minnesota reports: Winona County paid more than $128,000 following a January ransomware attack, according to a county news release. The county said it negotiated and paid $128,539.57 with assistance from its insurance carrier after ransomware was detected on its computer network Jan. 22, 2026. Officials said the decision was made after consultation with... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

UK: HIV charity has ‘sensitive’ health data stolen

George House Trust, a UK HIV charity, has notified service users that sensitive personal health data may have been stolen following a breach of Beacon CRM, a platform used by more than 1,000 charities and non-profits.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
BleepingComputer · · International

Over 8,300 Gitea servers vulnerable to code execution attacks

Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
HIPAA Journal · · US Federal

American Vision Partners Settles Data Breach Litigation for $1.75M

American Vision Partners, an eye care management company operating as Medical Management Resource Group LLC, has agreed to pay $1.75 million to settle a class action lawsuit tied to a data breach. The settlement resolves litigation brought by affected individuals whose information was exposed.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →