Psykoterapiakeskus Vastaamo https://fi.wikipedia.org/wiki/Psykoterapiakeskus_Vastaamo Cyberextortion Case On October 21, 2020, the news sources reported 40,000 patients' records having been stolen from the Finnish private health care provider Vastaamo. The extorters demanded 40 bitcoins, roughly 450,000 euros, or threatened to publish the records. The extorters published hundred patient records a day on a Tor message board to add pressure for their demands. The leaked patient records contained patient's full names, home addresses, social security numbers, and the therapists' and doctors' notes from each session. After the extortation of the company failed, the extorters sent victims an email demanding them to pay 200 euros in 24 hours or 500 euros in 48 hours in order to avoid publishing their sensitive personal data. The company's security practices were found to be inadequate: the sensitive data was not encrypted and apparently the system root password was very weak. The patient records were stolen ...