Finnish Police Identify Hacker of Vastaamo Psychotherapy Clinic

A 25-year old Finnish national has been identified as the alleged author of the harrowing ransomware attack on the Vastaamo psychotherapy center in 2020.

As some readers might remember, the incident was particularly upsetting, with the attacker threatening to leak sensitive therapy session notes and even going so far as to extort individual victims over the phone.

In an exchange with a local news outlet in October 2020, the alleged hacker showed no mercy, let alone remorse, saying he didn’t care if the harassment drives patients to suicide. The clinic eventually went bankrupt as a result of the hack.

Hacker currently resides abroad

Finland’s National Bureau of Investigation now reveals that a Finnish national has been indicted in relation to the cyberattack on Vastaamo.

“The National Bureau of Investigation has made progress in the criminal investigation of the hacking incident committed against Psychotherapy Centre Vastaamo,” reads the English-translated version of the press release. “A Finnish man has been remanded in absentia on suspicion of the offence. A European arrest warrant has been issued against the suspect.”

On Oct. 27, the Helsinki District Court indicted the man on probable cause of aggravated computer break-in, attempted aggravated extortion, and aggravated dissemination of information violating personal privacy.

To be cuffed and extradited

Finnish authorities have established that the suspect is a Finnish citizen currently living abroad. While investigators work to pinpoint his whereabouts, an arrest warrant has been issued. Once cuffed, the suspect is to be handed over to Finland for trial. An Interpol notice will also be issued against him, the police said.

Local news outlet HelsinginSanomat reported last week that the suspect has an ‘exceptional’ criminal record of offences dating back to his teens.

Victims urged to contact the police

While most of Vastaamo’s patients reported the crime to police, only 6,400 have so far provided detailed statements about their experience.

“We don’t have a precise understanding of the victims who paid ransom to the perpetrator,” Detective Chief Inspector Marko Leponen tells the Helsinki Times. “We’re talking about pretty marginal sums, though. Our findings suggest that about 20–30 people paid ransom.”

The police estimate that around 10,000 patients have yet to report the crime at all, despite being victims of the attack.

Vastaamo customers are encouraged to report the crime by following these instructions, especially if they are aware that their personal data has been leaked online, or if they’ve received a blackmail message related to the hack.

Victims are also urged to complete the electronic statement form available at riku.fi/en/vastaamo.