Therapy centre hack suspect faces aggravated blackmail, other charges

https://yle.fi/a/74-20055793

by jruohonen • 3 years ago

34 12 3 years ago

JshWright• 3 years ago

I realize this "Therapy centre hack suspect faces..." is the original title, but it's a bit of a garden path sentence. I had to read it twice to parse it correctly.

DFHippie• 3 years ago

A title for a different article:

"Therapy centre hack suspect faces, aggravated blackmail, other charges: three noun phrases without a conjunction."

mjhay• 3 years ago

There's supposed to be hack suspect faces, but I only see a picture of one face in the article.

Jhsto• 3 years ago

This is actually quite common in Finnish, since there is no strict word ordering. Once you have figured out all the words and their agglutinations, you can put them in any order. Many phrases don't parse until you heard all of it.

brysonreece• 3 years ago

Alternatively, “Suspect in therapy centre hack faces aggravated blackmail, other charges”

JumpCrisscross• 3 years ago

faces aggravated blackmail, other charges

Charged with aggravated blackmail.

abfaqb• 3 years ago

It was a bad idea to store all that information in machines connected to the internet.

plastic3169• 3 years ago

There was speculation in earlier thread about the case that suspect was active hn user https://news.ycombinator.com/item?id=34670385

veeti• 3 years ago

According to court documents a HN comment thread is part of the evidence.

costco• 3 years ago

Is it possible to read Finnish court documents online? I think I responded to this guy on here a while ago so I'm curious.

terom• 3 years ago

Additional context from HS: https://www.hs.fi/kotimaa/art-2000009931214.html

The suspect is accused of stealing tens of thousands of sensitive psychotherapy patient records from a MySQL server exposed to the public internet, using what I presume to be a weak MySQL (root) password.

The suspect is then accused of ransoming first the private healthcare provider, and then the individual patients (using the stolen email addresses). The ransomer went public and started leaking the patient records in batches of 100, before prematurely leaking the entire set by accident. The records contained what I believe included full detailed records from the individual psychotherapy sessions.

The company was aware of the breach, but did not report it before the attacker went public. There was, if I recall correctly, some kind of crypto locker compromise that brought their systems down, but those were only reported as some form of technical maintenance gone wrong.

Harder to find a source for it because the older articles are paywalled, but the IT employees responsible for the systems were not charged, instead the CEO was convincted of some form of criminal negligence. Plus financial fraud for selling the business without disclosing the earlier breach.

Therapy centre hack suspect faces aggravated blackmail, other charges

Related Stories