Loading story…
Finnish prosecutors have charged American citizen Daniel Lee Newhard with aiding and abetting the extortion of Vastaamo psychotherapy patients, following the notorious 2018 data breach. Julius Kivimäki, previously convicted for the breach and blackmail, has been released from jail pending appeal. The case continues to have significant legal and personal repercussions for those involved.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Finnish authorities have issued a wanted notice for convicted hacker **Aleksanteri Kivimäki** after the Supreme Court declined to hear his appeal, making his conviction in the **Vastaamo** cybercrime case final. Police said Kivimäki should be arrested and transferred to **Vantaa Prison** if found, while his lawyer said he is believed to be outside Finland after having been released while the case was under appeal. Kivimäki was sentenced by the Court of Appeal to nearly seven years in prison for the 2018 intrusion into psychotherapy provider Vastaamo and the subsequent extortion of both the company and its patients. The breach exposed highly sensitive therapy records belonging to about **33,000** patients, and more than **24,000** people reportedly received extortion demands, making the case one of Finland’s largest criminal matters by number of victims, including children and trauma patients.
Jul 15, 2026Aleksanteri Kivimäki, convicted for the Vastaamo psychotherapy center data breach and mass extortion, has been released from custody by the Helsinki Court of Appeal. The release is due to his prolonged pretrial detention, though his conviction and six-year sentence remain in place pending appeal. The case, which involved the theft and extortion of tens of thousands of sensitive therapy records, continues to have significant societal impact in Finland.
Jun 29, 2026
Multiple healthcare-related organizations disclosed **separate** incidents involving exposure or theft of patient data. Delta Medical Systems reported unauthorized access to its email environment on July 15, 2025, with potentially exposed data including names, dates of birth, Social Security numbers, driver’s license information, bank details, insurance information, and medical information. A separate HIPAA Journal report described additional incidents at Cedar Valley Services, Community Nurse, and Health Dimensions Group, including a likely **Qilin ransomware** intrusion at Cedar Valley Services and a vendor-linked compromise affecting Community Nurse through *Doctor Alliance*, where files may have been accessed between October 31 and November 17, 2025. In a different but related healthcare privacy matter, a judge approved a **$5 million settlement** in litigation against Geisinger Health and *Nuance Communications* over the theft of medical records affecting roughly **1.3 million patients** by a former Nuance employee. The stolen records reportedly included names, birthdates, addresses, medical record numbers, treatment details, and insurance information. While all three reports concern healthcare data exposure, they describe **distinct incidents** rather than one unified breach event, spanning direct compromises, third-party/vendor exposure, suspected ransomware activity, and post-incident legal resolution.
Jul 12, 2026