Finland’s Vastaamo Psychotherapy Breach: One of History’s Most Cruel Cyberattacks In 2018, Finnish hacker Julius Kivimäki infiltrated the servers of Vastaamo Psychotherapy Center, a major mental health provider with dozens of clinics across Finland. The breach exposed highly sensitive data belonging to 33,000 patients, including names, addresses, phone numbers, Social Security numbers, and most damagingly confidential therapy session notes. Unlike typical data breaches, this attack targeted an already vulnerable population: individuals seeking mental health support, many of whom were grappling with depression or anxiety. Kivimäki later attempted to extort Vastaamo’s CEO, Ville Tapio, demanding 100,000 euros in Bitcoin in exchange for not leaking the stolen records. The incident stands out as one of the most ethically egregious cyberattacks in history, not only due to the scale of the breach but also because of the deeply personal and exploitative nature of the stolen data. The fallout underscored the severe risks of inadequate cybersecurity in healthcare, where the stakes extend beyond financial loss to psychological harm and long-term trauma for victims.