Victims of Finland's massive psychotherapy center data breach confronted the accused hacker in Helsinki Court of Appeal this week. They described five years of psychological torment following the 2020 incident.
One victim said the data breach felt like a punch to the stomach. They lost breath, blood drained from their face, and their body froze in shock. Panic flooded their consciousness.
Many victims watched the trial via video link from secret locations to protect their identities. Some chose to appear in person alongside accused hacker Aleksanteri Kivimäki.
Victims described living in constant fear about what someone might do with their stolen therapy notes. One said they wake each morning wondering if this will be the day their information gets used against them.
Another victim called the data breach a life sentence in the truest sense. Stolen personal information becomes permanent currency that never expires, they told the court.
The deep shame feels like a black hole that follows everywhere, one victim described. Their trauma remains available online for anyone who wants to access it.
Many victims cannot return to therapy after what happened. One reported facing dismissal when seeking medical help. A doctor told them data breaches wouldn't bother someone with nothing to hide.
The appeal hearing is in its final stages. Kivimäki's defense will give closing arguments Thursday before judges deliberate their decision.
Kivimäki received six years and three months in prison at district court but now seeks acquittal on all charges. Prosecutors demand his sentence increase to seven years, the maximum penalty for his crimes.
The district court found Kivimäki illegally accessed Vastaamo's patient database and published about 33,000 patient records online in three batches.
This case highlights the lasting damage data breaches cause real people. Victims face permanent psychological consequences while stolen information remains available indefinitely online.