Vastaamo - Darknet Diaries Recap

Podcast: Darknet Diaries

Published: 2025-06-03

Duration: 51 min

Guests: Joe Tidy

Summary

The episode explores the devastating cyber attack on Vastamo, a Finnish psychotherapy center, where hackers stole and ransomed sensitive patient data, leading to a national crisis in Finland.

What Happened

The episode dives into the cyber attack on Vastamo, a Finnish psychotherapy center, in October 2020. A hacker, identifying as 'Ransom Man', claimed to have stolen sensitive data, including therapy notes of 33,000 patients, and demanded a ransom from the company. When Vastamo refused to pay, the hacker began releasing the data online, causing widespread panic and distress among the affected individuals. The Finnish police worked tirelessly to track down the hacker, eventually uncovering an IP address that led them to seize a crucial server in Helsinki. This server provided significant evidence, including personal information about the hacker, which helped in the investigation. The hacker, later identified as Julius Kivamaki, a notorious figure from the Lizard Squad group, attempted to extort individual patients via email when his initial ransom demands failed. Kivamaki's reckless actions and history of cybercrimes were unveiled during the investigation, highlighting his disregard for the consequences of his actions. The episode concludes with the arrest and conviction of Kivamaki, emphasizing the gravity of the attack and its impact on Finland's legal and cybersecurity landscape.

Key Insights

• In October 2020, a cyber attack on the Finnish psychotherapy center Vastamo resulted in the theft of sensitive data, including therapy notes for 33,000 patients.
• The hacker, known as 'Ransom Man', released patient data online after Vastamo refused to pay the ransom, leading to widespread panic among affected individuals.
• Finnish police traced the hacker's IP address to a server in Helsinki, which provided crucial evidence, including personal information about the hacker, aiding the investigation.
• Julius Kivamaki, a member of the Lizard Squad group, was identified as the hacker and was later arrested and convicted, highlighting his history of cybercrimes and disregard for consequences.