The processing of the unlawful access to Vastaamo’s information system in the National Prosecution Authority
In autumn 2025, the National Prosecution Authority sent a letter to the injured parties of the Vastaamo data breach, informing them of the recent decision to waive charges and the charges against the person alleged to have assisted Julius Kivimäki.
This page provides more information on the subject.
Questions and answers
I received a letter from the National Prosecution Authority regarding the Vastaamo data breach. Why?
You received the letter now because the police registered you as an injured party during the pre-trial investigation into the Vastaamo data breach.
Why am I receiving mail about this even though the perpetrator has already been convicted?
The Vastaamo data breach case continued even after Aleksanteri Kivimäki's conviction, because the prosecution received information about someone who was alleged to have assisted Kivimäki in spreading information violating the privacy of Vastaamo's clients.
After investigating the case, the prosecution decided to waive charges against the suspect for disseminating information that violated privacy.
If charges were not brought, why do I need to be informed?
You received the letter because, by law, information about the prosecution’s decision – whether it is a decision to waive charges or to bring charges – must be sent personally to everyone concerned.
The letter also talks about bringing charges. What is that about?
The prosecution has charged a new suspect with assisting Kivimäki in an attempt to blackmail the Vastaamo psychotherapy centre. The charges do not concern the victims of the data breach. The bankruptcy estate of the Vastaamo psychotherapy centre is the injured party (i.e. the victim of the crime).
The letter therefore contains two things: the decision to waive charges, which concerns the recipients of the letter, and information about the charges brought in which only the bankruptcy estate of the Vastaamo psychotherapy centre is involved.
Is this case now closed or might I receive more letters?
The case is now hopefully closed.
Do I need to do anything now?
No. You received the letter to let you know what decisions the authorities have taken in the case. You always have the right of an injured party to press charges, which means that, after the prosecution's decision, you may press charges yourself.
Why have I not received a letter, even though I am a victim of the crime in question and/or have been a client of Vastaamo?
Letters from the prosecution sent by post. It can take several days to receive mail, depending on your location.
The decision applies only to the persons who were injured parties in the offence for which Julius Kivimäki was convicted. The injured parties made a criminal complaint and gave a statement to the police. This authorised the police to check the clients against the patient database obtained from Vastaamo.
I don't want to have anything to do with this case.
You do not need to respond to the prosecution's letter. A decision to waive charges means that the case will not go before the District Court, so you will not receive any more mail on the subject. The separate prosecution of the attempted blackmail of the Vastaamo psychotherapy centre mentioned in the letter is not related to you and you will not receive any mail about it.
I wish to withdrawal an old criminal complaint I made. Can I do that?
If you wish to withdraw a criminal complaint, you must contact the police station where you lodged it.
Please note that, since a decision to waive charges has been taken, the case has been closed by the authorities. The withdrawal of a criminal complaint will therefore no longer have any effect.
I believe that charges should have been brought in the case. Why was this not done?
The letter sent by the prosecution contains the prosecutor's decision, which explains the reasons for the partial waiving of charges.
However, charges have been brought to the extent that attempts were made to blackmail Vastaamo psychotherapy centre and, in this respect, the culpability of the person who assisted Kivimäki (i.e. the defendant) will be assessed before the District Court. The present proceedings before the District Court involve the defendant and only the bankruptcy estate of Vastaamo, as the injured party.
Could the prosecution reconsider and bring charges at my request?
The decision of the prosecution is final and cannot be appealed. A complaint against the decision can be lodged with the Office of the Prosecutor General.
I want to complain. How can I do this?
Instructions for complaining can be found on the website of the National Prosecution Authority in Finnish or Swedish at https://syyttajalaitos.fi/kantelut
Can I claim compensation on the basis of this decision?
For compensation, we advise you to contact either legal counsel, Victim Support Finland or the State Treasury. Victim Support Finland and the State Treasury have their own webpages on the subject where you can find more information: https://www.riku.fi/en/vastaamo-case-from-the-victim-perspective-2/ and https://www.valtiokonttori.fi/en/service/vastaamo/
I registered a claim for compensation in the criminal complaint I made, but I can't remember how much I claimed. Can I find out?
Yes. You can ask the police for a copy of the pre-trial investigation report. Contact the police station where you logged the criminal complaint.
Customer service
If you have any further questions, please contact [email protected]
Support for data breach victims
Victim Support Finland provides practical advice in criminal matters and discussion support. All services are free of charge.
- Victim Support Finland 116 006 serves in Finnish Mon–Thu from 9 a.m. to 6 p.m. Fridays from 9 a.m. to 4 p.m. and in Swedish Mon–Fri from 12 noon to 2 p.m.
- RIKUchat is available (in Finnish) Mon–Thu from 9 a.m. to 6 p.m. and Fridays from 9 a.m. to 4 p.m.
Special advice and instructions for the victims of the Vastaamo case