When The Therapy Notes of 33K Patients Were Leaked Online (with Jenny Kleeman)

Criminal | A Podcast About Crime

  • Aug 25, 2026
  • 41:39
  • Full Episode

Imagine receiving an email from a stranger that said your therapist’s notes about you would be released onto the internet for all to see — unless you paid a ransom. That’s exactly what happened to 33,000 people in Finland in 2020, and it became the biggest criminal case in the country’s history.

You can read Jenny Kleeman's reporting on this story ⁠(https://www.theguardian.com/technology/2026/jan/17/vastaamo-hack-finland-therapy-notes)⁠, and listen to her BBC podcast, called Ransom Man (https://www.bbc.com/audio/series/m002q86y).

This is the latest video in our new series, What Happened Next? Follow us for more videos coming soon. Get even more from us by joining Criminal Plus on Patreon: https://www.patreon.com/Criminal

Chapters: 0:00 Intro 01:08 No ordinary junk mail 02:02 Tina's story 05:21 The release of the therapy notes 06:41 A letter from the hacker 09:43 Who was behind the attack? 15:19 Who is Julius Kivimaki? 20:00 The investigation 29:44 The arrest 32:44 The trial 36:37 Meeting Julius Kivimaki

Listen to every episode of Criminal on your favorite podcast platform: https://pod.link/809264944

Follow Criminal on Instagram (https://www.instagram.com/criminal_podcast), Facebook (https://www.facebook.com/thisiscriminal), and TikTok (https://www.tiktok.com/@criminal_podcast)

Sign up for our newsletter: https://thisiscriminal.com/newsletter

We also make the podcasts This is Love (https://pod.link/1337100398) and Phoebe Reads a Mystery (https://pod.link/1503921457).

Check out our online shop: https://shop.thisiscriminal.com/

Brief Summary

The episode discusses the hacking of Vastimo, the leak of sensitive therapy records, and its impact on victims in Finland.

Key points

  • The Finnish Therapy Hack. A hacker demands ransom from a psychotherapy clinic, threatening to release sensitive patient records.
  • Tina's Terrifying Discovery. Tina, a victim, receives a ransom email while unwinding in a sauna, unaware of the widespread breach.
  • The Hacker's Identity. Investigators link the hack to notorious hacker Julius Kimaki through digital breadcrumbs.
  • The Impact of the Leak. The leak caused profound emotional distress among victims, affecting their trust in therapy.
  • The Arrest of Julius Kivaki. After years of investigation, Julius Kivaki was arrested in Paris under a false identity.
  • The Trial Experience. The trial became a public spectacle, with thousands of victims watching from theaters.

Tension

75/ 100High tension

More from Criminal | A Podcast About Crime

Solve the Crime

Read a real case one clue at a time, then see how your call held up against the investigators.

Start a Case