A faceless hacker stole my therapy notes – now my deepest secrets are online forever

In September 2025, a Helsinki court ordered the release of Aleksanteri Tomminpoika Kivimäki (aka “Julius Kivimäki” aka “Zeekill”) pending the resolution of his appeal of an April 2024 conviction stemming from the theft of psychotherapy records of 33,000 individuals. He was released because he might wind up having spent too much time in prison. But how much time have the victims spent suffering?

Jenny Kleeman reports that Meri-Tuuli Auer found her full name and social security number in a spam email claiming her data had been hacked from Vastaamo and demanding €200 in bitcoin within 24 hours, rising to €500 within 48 hours, with threats that her information would be published publicly if she did not pay. Read more at BBC. The article highlights the enduring impact of the breach on one victim, illustrating how the attack exposed deeply personal details and prompted coercive demands. According to BBC, the case underlines the lasting harm to victims following the Vastaamo data breach and the legal reach of those responsible.