The Dark Path of Data Breaches
Lessons for Psychologists
In 2020, Finland experienced one of the most harrowing data breaches in its history, targeting Vastaamo, a psychotherapy center. This cyberattack exposed the deeply personal therapy records of over 33,000 patients, including session notes, social security numbers, and contact details. The attackers demanded ransom not only from the organization but also from individual patients, threatening to publicly release their sensitive information. Tragically, the consequences went far beyond financial loss. For some victims, the breach led to severe emotional distress, and in the most heartbreaking cases, suicides.
The Vastaamo breach shook the foundations of trust in mental health services and highlighted a glaring vulnerability in the healthcare sector: the lack of robust cybersecurity measures. For psychologists, whose work depends on the confidentiality of their patients’ most personal information, this incident was a wake-up call. It underscored the critical importance of understanding and implementing cybersecurity practices — not just to protect data, but to safeguard the trust and well-being of those they serve.
As a psychologist studying cybersecurity, I’ve come to realize that bridging these two fields is not only necessary but urgent. The digital transformation of mental health services, from…
