The Vastaamo data breach (2018–2020) involved the hacking of a Finnish psychotherapy provider’s database, exposing the personal and medical records of 33,000 patients, including highly sensitive therapy notes. The attacker, later identified as Aleksanteri Kivimäki, blackmailed both the company and individual victims, demanding ransom payments in cryptocurrency. When demands went unmet, the stolen data—including records of children and trauma survivors—was published online. The breach had devastating consequences, with reports linking it to suicides among victims due to the exposure of deeply private information. Kivimäki was convicted of aggravated data breach, 20 counts of extortion, over 20,000 attempted extortions, and 9,000 privacy violations, receiving a 6.5-year prison sentence (prosecutors sought 7 years). The case remains one of Finland’s largest cybercrime trials, with 24,000+ victims filing police reports. The prolonged legal battle and Kivimäki’s temporary release in 2024 have further traumatized victims, many of whom continue to suffer psychological and reputational harm.