Vastaamos client registry was breached in November 2018 and there has been a second smaller breach in 2019 before March 2019. There is no indication that the whole database has been leaked in 2019 incident, but it is possible that information regarding some individuals has been copied. If you suspect you have been a victim of the breach or you have received a ransom request, please follow these steps: Take a screenshot of the ransom message and take a photo of it and store it on your computer for investigation. The information may have been leaked to other parties already.”]
Source: https://kybervpk.fi/en/releases/checklist-for-victims-of-a-data-breach/