cross-posted from: https://discuss.tchncs.de/post/10692187

so, the company was Vastaamo. was because it got bankrupt after the breach, and GDPR violations.

the “hacker”(or rather cracker) was extradited from France to Finland.
you can read about how terrible the company’s security was here: https://tietosuoja.fi/en/-/administrative-fine-imposed-on-psychotherapy-centre-vastaamo-for-data-protection-violations

or watch mental outlaw’s video on the matter, or the Wikipedia article on the breach.

now there are several things that shouldn’t have happened (e.g.: don’t do these things on your main OS, have root access disabled, etc.), but I’ll leave that to you experts.

    • umbrella@lemmy.ml
      41·
      9 months ago

      would be great if i wasnt forced to share data with morons with that shitty fucking brain

  • baseless_discourse@mander.xyz
    71·
    9 months ago

    While in the U.S., your mental health data are just on the market, waiting to be brought.

    https://www.ftc.gov/business-guidance/blog/2023/03/ftc-says-online-counseling-service-betterhelp-pushed-people-handing-over-health-information-broke

    In the good case, there will be a class action law suit, and every victim will get approximately 2 dollars back for all their health data sold; but only after giving more sensitive information to the company that distributes these two dollars.

    https://www.morrisbart.com/faqs/how-is-money-divided-in-a-class-action-lawsuit/

    What a fun time to be alive.

      • chiliedogg@lemmy.world
        44·
        9 months ago

        I firmly believe any service that advertises that much on YouTube and podcasts is evil.

        I’m waiting to hear about Hello Fresh’s child trafficking ring or whatever they’re up to.

          • AMDIsOurLord@lemmy.ml
            8·
            9 months ago

            Raid Shadow Legends is connected to an Israeli gambling company

            Anything that advertises heavily is most likely to be a piece of shit

          • IntentionallyAnon@lemm.ee
            7·
            9 months ago

            I find Nord’s sponsor scripts misleading at the best and lies at the worst but the service for what it is is pretty good. Still would recommend Mullvad

            • anivia@lemmy.ml
              51·
              9 months ago

              but the service for what it is is pretty good

              I disagree. Most people wouldn’t need it at all, and for most people that would actually need it it’s useless due to not supporting port forwarding

              • IntentionallyAnon@lemm.ee
                1·
                9 months ago

                Mainly so someone doesn’t get my ip and know my city and sometimes I sail the high seas

                I know ip is useless. I just don’t want someone to get my city and send an investigator

                I fully agree with your point. I feel like sponsor scripts should say these points. 1: if somebody sends you an ip tracker link Nord won’t leak your IP 2. if you want to watch georestricted content 3. If you are on someone else’s network and you don’t want them peeping your websites. 4. 🏴‍☠️

                • anivia@lemmy.ml
                  1·
                  9 months ago

                  and sometimes I sail the high seas

                  Yeah, but it’s useless for that. If you pirate from Usenet or one click hosters you don’t need a VPN, and if you use torrents or other peer to peer protocols you need port forwarding, which NordVPN doesn’t support

  • Ann Archy@lemmy.world
    541·
    9 months ago

    Not exactly an indictment on the hacker as much as it is one on these predatory online psych dealerships.

    Once again we’re seeing deregulations leading to McSolutions that A) are of lower quality, and B) more expensive than what we had.

  • Kecessa@sh.itjust.works
    452·
    9 months ago

    Who has an email associated with their crypto wallet??

    Unless… Oh… He transferred to a centralized service first then mixed it up and then transferred to the same service…

  • TWeaK@lemm.eeEnglish
    42·
    9 months ago

    Sad that the company was able to declare bankruptcy, rather than the directors being held criminally liable.

  • uis@lemmy.world
    414·
    9 months ago

    On one hand what the fuck just happeend, on the other hand it’s Finland, in Finland massmurderer will complain about lack of PS5 in prison and.

    Edit: nevermind, it was PS3

    • Cavemanfreak@lemm.ee
      13·
      9 months ago

      Dude, did you even read the (very short, obviously biased and sometimes factually incorrect) article you linked? Breivik is in Norway, not in Finland.

      • Urist@lemmy.mlEnglish
        15·
        9 months ago

        Also, why the fuck should they not have access to ps3, books and such. Prison is about taking away one’s freedom, not about putting people in psychological or physical distress. In Norway we want convicts to be in a better state when they come out than when they got incarcerated (though Breivik will most likely never come out). Who wants to live next to a person who have been 20 years in solitary, I mean come on.

        • jkrtn@lemmy.ml
          7·
          9 months ago

          If you’re not a bloodthirsty Calvinist predestination lover I don’t know if you would understand the American mindset at all.

        • Cavemanfreak@lemm.ee
          4·
          9 months ago

          Yep. The American system of punishment over rehabilitation is so strange to me. It won’t help one bit when (if in this case) they get out.