The processing of the unlawful access to Vastaamo’s information system in the National Prosecution Authority
On this page, you can find information about the processing of Vastaamo’s data breach and answers to frequently asked questions.
Customer service number
On Tuesdays from 9 a.m. to 12 noon and on Thursdays from 12 noon to 3 p.m. by calling +358 29 562 6305
or by email to [email protected]
How is the case progressing?
The situation at this moment
At the moment, the police is still carrying out the pre-trial investigation. It will be completed in August and the case will be transferred back to the National Prosecution Authority.
Phases of processing a criminal case
When will the consideration of charges be completed?
The deadline for the bringing of charges is 18 October 2023. At this point at the latest, the prosecutor will announce whether they will bring charges, in other words, whether the case will be prosecuted.
Support for data breach victims
Victim Support Finland provides practical advice in criminal matters and discussion support. All services are free of charge.
Victim Support Finland 116 006 serves in Finnish Mon–Fri from 9 a.m. to 8 p.m. and in Swedish from 12 noon to 2 p.m.
RIKUchat is available on weekdays from 9 a.m. to 3 p.m. and on Mondays also from 5 p.m. to 7 p.m.
Special advice and instructions for the victims of the Vastaamo case
Questions and answers related to the Vastaamo case
The police requested that a criminal complaint be filed and a statement be provided by the end of May 2022.
If you have not filed the criminal complaint and provided a statement by this deadline, the police cannot guarantee that your case will reach the prosecutor as part of this large entity that is being investigated.
You can also file the criminal complaint at a later stage, but your case will then be solved separately at a later stage.
You have received the letter, because you have filed a criminal complaint concerning the Vastaamo data breach, and the police have transferred the case to the National Prosecution Authority for the consideration of charges.
You may have included a claim for compensation in the criminal complaint and asked the prosecutor to pursue it at a trial. However, the prosecutor cannot pursue the claims for compensation, because the number of parties involved, i.e. the victims of the offence, is extremely large.
You can submit a claim for compensation yourself. If you wish, you can use an attorney. You can find out more about attorneys on the website of legal aid.
If the prosecutor decides to bring charges, the case will be heard at the District Court of Länsi-Uusimaa.
Because the number of injured parties in the Vastaamo cases is very large, amounting to as many as several thousands of victims of the data breach, arranging a trial or a hearing at the District Court requires special arrangements.
For instance, due to the large number of injured parties, it is not possible to arrange for a privacy screen for them; instead, the parties will most likely follow the trial elsewhere in the Helsinki Metropolitan Area via a remote connection.
The prosecution authority sends letters to everyone who has filed a police report. Post can take several days to deliver, depending on where you live.
You can withdraw your report. If you wish to do so, contact the police department at which you filed the report.
Please note that withdrawing your police report will not necessarily affect the processing of your matter. If the use of your data is being investigated as possible aggravated extortion, the prosecutor has the right to bring charges irrespective of any withdrawal.
This is because aggravated extortion is an offence subject to public prosecution. An offence subject to public prosecution is one for which the prosecutor has the right to bring charges regardless of the injured party's wishes.
Unfortunately, no. The National Prosecution Authority will not send you any more mail, but the District Court will contact those who have filed a police report.
You cannot submit your claim yet. The District Court will send a letter to everyone who filed a police report when the trial, should the matter come to that, is approaching. In the letter, the District Court will also ask about your claims for compensation. The letter you will receive from the District Court will instruct you on where to address your claim.
Yes you can. You can request the pre-trial investigation record from the police. Please contact the police department at which you filed your report.
It does not matter that you did not answer the questionnaire in time. It was not a binding registration, but rather a preliminary survey about how many people would be interested in taking part in the trial. You still have the right to take part in the trial if you want.
The District Court of Länsi-Uusimaa wanted to survey the number of people interested in participating so that they can provide appropriate facilities for the trial.
As there are so many injured parties in the Vastaamo case, the District Court trial requires special arrangements. Knowing roughly how many people will be attending helps the District Court prepare for the trial.
The deadline for bringing charges is 18 October 2023. On that date at the latest, the prosecutor will announce whether they intend to bring charges, i.e. take the matter to court.
The matter will then be handed over to the District Court of Länsi-Uusimaa. The District Court will announce the location and time of the trial.