{"id":25525,"date":"2026-02-26T16:18:08","date_gmt":"2026-02-26T16:18:08","guid":{"rendered":"https:\/\/www.europesays.com\/dk\/25525\/"},"modified":"2026-02-26T16:18:08","modified_gmt":"2026-02-26T16:18:08","slug":"kivimaki-sentence-increased-to-nearly-seven-years-in-vastaamo-case","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/dk\/25525\/","title":{"rendered":"Kivim\u00e4ki sentence increased to nearly seven years in Vastaamo case"},"content":{"rendered":"<p>The Helsinki Court of Appeal sentenced Aleksanteri Kivim\u00e4ki to six years and 11 months in prison. The term stands one month short of the statutory maximum of seven years for the offences.<\/p>\n<p>&#13;<\/p>\n<p>The court upheld the district court\u2019s findings of guilt but raised the sentence from six years and three months <a href=\"https:\/\/www.helsinkitimes.fi\/finland\/finland-news\/domestic\/25176-vastaamo-hacker-sentenced-to-six-years-three-months-in-prison.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">imposed in April 2024<\/a> by the Western Uusimaa District Court.<\/p>\n<p>&#13;<\/p>\n<p>Kivim\u00e4ki denied all charges and sought dismissal of the case before the appeal court. Prosecutors called for a seven-year sentence.<\/p>\n<p>&#13;<\/p>\n<p>\t\t\t\t\t\t\t\t &#13;<\/p>\n<p>The case concerns the <a href=\"https:\/\/www.helsinkitimes.fi\/finland\/finland-news\/domestic\/18203-data-break-in-compromises-privacy-of-thousands-of-psychotherapy-clients-in-finland.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">breach<\/a> of the psychotherapy centre Vastaamo\u2019s patient database in November 2018. The perpetrator accessed the system without authorisation by using user credentials that did not belong to him. The court found that the intrusion required dedicated software and a detailed technical plan.<\/p>\n<p>&#13;<\/p>\n<p>Judges stated that the offender reduced the risk of detection by using encrypted VPN connections. Servers involved in the offence relied on strong encryption methods.<\/p>\n<p>&#13;<\/p>\n<p>In autumn 2020, the attacker attempted to extort money from Vastaamo. When that failed, patients began to receive blackmail messages. Sensitive therapy records later appeared on the Tor network.<\/p>\n<p>&#13;<\/p>\n<p>The court convicted Kivim\u00e4ki of aggravated data breach, aggravated attempted extortion, 20 counts of aggravated extortion, 9,231 counts of aggravated dissemination of information violating personal privacy and 20,745 counts of aggravated attempted extortion.<\/p>\n<p>&#13;<\/p>\n<p>The Court of Appeal described the crimes as a planned entity that affected an exceptionally large number of victims in a vulnerable position. It stated that the acts were conducive to causing significant suffering.<\/p>\n<p>&#13;<\/p>\n<p>\u201cThe offences were driven by the aim of obtaining significant financial benefit,\u201d the court said in its judgment.<\/p>\n<p>&#13;<\/p>\n<p>The judges assessed that a fair punishment would in principle have been the <a href=\"https:\/\/www.helsinkitimes.fi\/finland\/finland-news\/domestic\/24954-prosecutors-call-for-maximum-penalty-over-vastaamo-hacking.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">maximum seven-year<\/a> term. They reduced the sentence by one month because Kivim\u00e4ki reached conditional settlement agreements with numerous victims concerning compensation.<\/p>\n<p>&#13;<\/p>\n<p>\u201cThe agreements are conditional, and according to the information presented no compensation has so far been paid by Kivim\u00e4ki,\u201d the court wrote. It added that the agreements justified only a minor mitigating effect, including possible savings in legal costs.<\/p>\n<p>&#13;<\/p>\n<p>Kivim\u00e4ki\u2019s lawyer Peter Jaari said he had discussed the judgment with his client.<\/p>\n<p>&#13;<\/p>\n<p>\u201cOf course Kivim\u00e4ki is deeply disappointed,\u201d Jaari told <a href=\"https:\/\/www.hs.fi\/suomi\/art-2000011829718.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Helsingin Sanomat<\/a>. He described the ruling as the least expected of the alternatives considered by the defence.<\/p>\n<p>&#13;<\/p>\n<p>Jaari said Kivim\u00e4ki is currently abroad and that he does not know his exact location. The appeal court\u2019s judgment is enforceable despite the possibility of applying for leave to appeal to the Supreme Court. Jaari said it is likely that his client will seek such leave.<\/p>\n<p>&#13;<\/p>\n<p>Kivim\u00e4ki must report to prison at a time set by the Criminal Sanctions Agency to serve the remainder of his sentence.<\/p>\n<p>&#13;<\/p>\n<p>He has spent more than two and a half years in pre-trial detention. As a first-time offender under Finnish law, he becomes eligible for conditional release after serving half of the sentence.<\/p>\n<p>&#13;<\/p>\n<p>French police arrested Kivim\u00e4ki near Paris in February 2023 following an international search. The district court released him in February 2024 during proceedings, but the Court of Appeal later ordered him remanded in custody again. He evaded authorities for about a week before police found him in a flat in central Helsinki.<\/p>\n<p>&#13;<\/p>\n<p>In September last year, during the appeal hearing, the court <a href=\"https:\/\/www.helsinkitimes.fi\/finland\/finland-news\/domestic\/27889-kivimaeki-walks-free-during-appeal-over-vastaamo-data-breach.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">released him<\/a> pending judgment, citing the length of his pre-trial detention.<\/p>\n<p>&#13;<\/p>\n<p>The Vastaamo breach ranks as the largest criminal case in Finland measured by the number of victims. Separate proceedings linked to the case remain pending in the district court, including charges against another individual for aiding aggravated extortion.<\/p>\n<p>&#13;<\/p>\n<p>HT<\/p>\n","protected":false},"excerpt":{"rendered":"The Helsinki Court of Appeal sentenced Aleksanteri Kivim\u00e4ki to six years and 11 months in prison. The term&hellip;\n","protected":false},"author":2,"featured_media":25526,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[87],"tags":[16613,16620,16616,16617,158,113,16615,16619,16618,16614],"class_list":{"0":"post-25525","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-helsinki","8":"tag-aleksanteri-kivimaki","9":"tag-cyber-crime","10":"tag-data-breach","11":"tag-extortion","12":"tag-finland","13":"tag-helsinki","14":"tag-helsinki-court-of-appeal","15":"tag-pasi-vainio","16":"tag-peter-jaari","17":"tag-vastaamo"},"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/posts\/25525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/comments?post=25525"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/posts\/25525\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/media\/25526"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/media?parent=25525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/categories?post=25525"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/tags?post=25525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}