Data Breach of the Student Union Membership Registry Servers
Dear Member,
We regret to inform you that the network and database servers of our membership registry provider, Hakosalo Innovations ltd, were the target of a data breach during the night between Monday and Tuesday, October 21-22, 2024. Upon discovering the breach, the provider immediately took action in collaboration with their service provider. The breach was halted, and security levels were increased. An immediate report was made to Traficom’s Cybersecurity Center and the Data Protection Ombudsman. A police report was also filed.
The provider thoroughly investigated the matter with their service provider, and based on these investigations, no data was downloaded from the servers. The data content of the servers was rendered unusable during the breach. All data content of the servers was restored from backups, which resulted in the loss of one day’s changes in the membership registry.
The provider has also taken steps to further improve security to prevent similar situations from occurring in the future.
Risk Assessment of Membership Registry Server Data Breach – October 29, 2024
Data Criticality: FAIRLY HIGH
– The database contains members’ personal information (name, email address, personal ID/birthdate, phone number, address details).
Data Loss: FAIRLY LOW
– Data was restored from a backup taken one day prior. Changes made to the membership registry within that day were lost. Card orders were successfully recovered in cooperation with Cardplus ltd. Membership enrollments and renewals from that period are available through the Paytrail merchant portal.
Data Leakage: LOW
– Based on investigations, this incident appears to be a data deletion-extortion operation, with no evidence suggesting that data was downloaded outside the servers.
If you notice any suspicious activity involving your information, more details on how to proceed can be found on the suomi.fi website: https://www.suomi.fi/guides/data-leak
We appreciate your understanding in this situation.
If you have any questions or would like more information, please contact:
Petri Hakosalo
CEO
040 591 5668
petri.hakosalo@hakosaloinnovations.fi
Hakosalo Innovations ltd
www.hakosaloinnovations.fi
—
News Update:
October 29, 2024, at 2:55 PM – Risk assessment provided by Hakosalo Innovations Oy added to the news.