Every public data breach

47 disclosed this week · 26,367 on record

Vastaamo

Disclosed Jul 17, 202130,433 accountsUnverified

In October 2020, the Finnish psychotherapy service Vastaamo was the subject of a ransomware attack targeting first the company itself, followed by their patients directly . The original security incident dates back to a period between late 2018 and early 2019 and exposed data including 30k unique email addresses, names, social security numbers and notes on individuals' psychotherapy sessions. This breach has been flagged as "sensitive" and is only searchable by owners of the email addresses and domains exposed in the incident.

What is known

People affected30,433 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJul 17, 2021
HappenedMar 31, 2019
AttackRansomware
Data exposedEmailsNamesHealthGovernment IDs
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Vastaamo