The Vastaamo data breach, revealed in October 2020, involved a Finnish psychotherapy provider whose patient records were hacked. Attackers demanded ransom from both the company and patients, exposing sensitive data of about 30,000 individuals. The breach highlighted poor security practices, as data was unencrypted and lacked password protection. Vastaamo was fined €608,000 for GDPR violations. The incident led to significant psychological and societal impacts, prompting Finland to strengthen cybersecurity measures.