PrivacyPod30 Loka 2025

#79: Stay Frosty – The Massive City of Helsinki Data Breach

In this episode, our experts Hannes Saarinen and Pilvi Alopaeus take a closer look at one of the largest data breaches in Finland, where an attacker gained access to the City of Helsinki's network drive—compromising the personal data of around 300,000 people living in or, for example, attending school in Helsinki.

To help us unpack the case and the newly published investigation report, we're joined by Mikael Hitruhin, Data Protection Lawyer at the City of Helsinki, who has been part of the city's investigative team.

What went wrong? How could this have happened—and what does it have to do with Swiss cheese? We dive into both the technical and legal aspects, as well as Mikael's experiences and lessons learned from working through such a significant and devastating attack.

We'll also explore the upcoming change in Finnish law that would empower the Data Protection Ombudsman to issue fines to the public sector. Will the threat of fines raise the level of data protection in public organisations—and how might it affect public trust and the sense of justice?

LINKS:

The report:

https://www.turvallisuustutkinta.fi/material/sites/otkes/otkes/mvyzc49g6/P2024_Helsinki_Investigation_report.pdf

Did you enjoy our show? Support us by buying us a coffee here: https://bmc.link/privacypod4u

We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:

Instagram: @privacypod

LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/

Email: tietosuojapod@protonmail.com

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(79)

#78: Jyri is still annoyed at (or with?) Noyb

We are back from summer break with a bunch of positive energy (that lasted through about the first two cases). This episode was recorded by Hannes, Jyri, and Pilvi on the historical day of data transf...

10 Syys 202558min

#77: PrivacyPod special: Breaking Down the Latombe decision

This PrivacyPod special episode was recorded on the very day the Latombe decision (T-553/23) was made, capturing the immediacy and raw analysis of a pivotal moment in EU–US data privacy law. Host Joos...

8 Syys 20251h

#76: The one that got us banned from a country we cannot mention

In this episode, Jyri and Pilvi have been fished out from the pool and summer vacays to discuss privacy–and they desperately try to be optimistic, it's summer, after all. Whippii. In this episode, we ...

18 Kesä 20251h 1min

#75: Joost's Case Corner – wait…whose sex ad is that?

In this Joost's Case Corner episode Joost, Pilvi and Jyri discuss running and privacy. In fact, the cases on our chopping block today highlights that no matter how complex privacy is, it always comes ...

19 Touko 20251h 5min

#74: Joost's Case Corner – why carrots are orange

In this Joost's Case Corner episode Joost, Jyri, and Pilvi discuss why Netherlands you should go to Netherlands as well as some of the latest CJEU cases. On our chopping block today, are: CJEU Deldi...

30 Huhti 202544min

#73: If you want something different, do it yourself

In this episode Jyri and Pilvi try to overcome their urge to discuss anything else but privacy and just be negative and tired of how the world is going, and after a while they actually somewhat succee...

24 Huhti 20251h 23min

#72 An A-Mousse-Bouche (get it????) of recent EU case law

Once again, Pilvi and Jyri are joined by the legendary Joost, in another episode of Joost Case Corner and the magic of European Court of Justice (and Court of First Instance) case law! In this episo...

10 Helmi 202545min