Security News > 2020 > October > Finnish psychotherapy clinic discloses data breach, victims extorted

Finnish psychotherapy clinic discloses data breach, victims extorted
2020-10-27 03:30

A large psychotherapy clinic in Finland is under heavy stress after a threat actor asked a ransom for a client database with confidential information stolen in a data breach that likely happened almost two years ago.

Psychotherapy Center Vastaamo announced the incident last Wednesday, saying that the extortionist first contacted three of its employees in September, asking for 40 bitcoins not to release stolen patient data.

"Based on the investigations, it seems probable that the data breach that led to the theft of the customer database took place in November 2018" - Vastaamo.

The breach in March prompted steps that corrected the issues related to the protection of customer information, especially since Vastaamo was to be acquired by PTK Midco in May. As part of the acquisition process, an external cybersecurity audit was commissioned in April-May 2019.

Vastaamo is offering victims of the data breach support over the phone, advising on what to do if their private information has been leaked online.


News URL

https://www.bleepingcomputer.com/news/security/finnish-psychotherapy-clinic-discloses-data-breach-victims-extorted/