DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Public notice for individuals affected by an information security breach in the Social Services, Health Care and Rescue Services Division of Helsinki

Posted on May 7, 2025 by Dissent

An internal information security breach has been identified in the Social Services, Health Care and Rescue Services Division of the City of Helsinki. The breach concerns client data from certain Family Law Services, which between 2012 and 2019 was stored on the Division’s internal network without adequate access restrictions. No external parties have had access to the data at any time.

We have discovered that some personal data concerning clients of Family Law Services was stored in such a way that too many employees within the Division could access it. Access to this data should have been restricted to only those professionals directly involved in the client’s case. The data was never accessible to anyone outside the Division.

The matter came to light when a Division employee raised a concern using our internal reporting system.

Who is affected by the breach?

The breach concerns parents and their children who were clients of Helsinki’s Family Law Services and for whom custody agreements were confirmed between 2012 and 2019. The data includes the names and personal identity codes of parents and children, information on custody arrangements, and in some cases, details about which parent the child resides with.

No action required from affected individuals

The data has now been secured with appropriate access controls, and only authorised employees may view it as part of their work duties. The breach is not expected to have any consequences for those affected.

No action is required from individuals whose data was involved. However, under the General Data Protection Regulation (GDPR), we are required to notify affected individuals of the incident. We have also reported the internal breach to the Office of the Data Protection Ombudsman.

If you would like more information about the breach, you may contact Family Law Services directly. You can also reach out to the City of Helsinki’s Data Protection Officer with any data protection-related questions.

Family Law Services 
Call hours: Monday to Tuesday 9.00–10.00
Phone number:  +358 50 5720129 / +358 9 310 83316

Helsinki’s Data Protection Officer 
Phone number: +358 9 310 1691 (switchboard)
Email: [email protected](Link opens default mail program) 

 

Category: ExposureGovernment Sector

Post navigation

← PowerSchool paid a hacker’s extortion demand, but now school district clients are being extorted anyway (3)
UK: Legal Aid Agency hit by cyber security incident →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • ConnectWise suspects cyberattack affecting some ScreenConnect customers was state-sponsored
  • Possible ransomware attack disrupts Maine and New Hampshire Covenant Health locations
  • HHS OCR Settles HIPAA Security Rule Investigation of BayCare Health System for $800k and Corrective Action Plan
  • UK: Two NHS trusts hit by cyberattack that exploited Ivanti flaw
  • Update: ALN Medical Management’s Data Breach Total Soars to More than 1.8 Million Patients Affected
  • Russian-linked hackers target UK Defense Ministry while posing as journalists
  • Banks Want SEC to Rescind Cyberattack Disclosure Requirements
  • MathWorks, Creator of MATLAB, Confirms Ransomware Attack
  • Russian hospital programmer gets 14 years for leaking soldier data to Ukraine
  • MSCS board renews contract with PowerSchool while suing them

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Home Pregnancy Test Company Wins Dismissal of Pixel Wiretapping Suit
  • The CCPA emerges as a new legal battleground for web tracking litigation
  • U.S. Spy Agencies Are Getting a One-Stop Shop to Buy Your Most Sensitive Personal Data
  • Period Tracking App Users Win Class Status in Google, Meta Suit
  • AI: the Italian Supervisory Authority fines Luka, the U.S. company behind chatbot “Replika,” 5 Million €
  • D.C. Federal Court Rules Termination of Democrat PCLOB Members Is Unlawful
  • Meta may continue to train AI with user data, German court says

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.