A cyber breach at Finland’s state information technology provider Valtori affected the Finnish Defence Forces and the Office of the President, according to documents obtained by broadcaster Yle.
The case, under investigation as suspected espionage and aggravated unauthorised access to computer systems, involves a breach of a mobile device management service used across the Finnish government.
Valtori disclosed the incident in February and said about 50,000 users were affected.
The agency stated that the breach did not involve devices connected to Finland’s secure government communications network.
Documents reviewed by Yle show that several security authorities were affected by the intrusion. The Office of the President reported that the breach involved data linked to more than 50 people. Finnish Customs made the same assessment in documents cited by the broadcaster.
Information related to the Defence Forces was redacted from the released records.
The National Police Board estimated that information tied to between 16 and 30 people was exposed. In a document cited by Yle, police authorities said the compromised material contained identity information linked to official duties and not broad organisational data.
Valtori chief executive Hannu Naumanen told Yle that no information from the government’s secure network had leaked.
The breach targeted a mobile service maintained by Valtori and used widely within state administration for managing government-issued devices. According to information published by Yle and earlier statements from Valtori, the leaked material included personal and contact details, country-level location data and information about software installed on devices.
Ministries across the Finnish government were also affected.
Finland’s National Bureau of Investigation, known as KRP, is leading the inquiry.
HT
