Helsinki suffers data breach after hackers exploit unpatched flaw

The City of Helsinki disclosed a late-April 2024 breach of its education division after an attacker exploited an unpatched remote access server vulnerability to access a network drive containing tens of millions of files; sensitive personal data (usernames, emails, personal IDs, addresses, welfare and medical records) may affect over 80,000 students, guardians and all personnel, and the city has notified relevant authorities while investigation continues.