Finnish authorities suspect espionage in major state data breach

The Finnish National Bureau of Investigations has expanded its probe into a January cyberattack on the state IT agency Valtori, now suspecting espionage alongside aggravated data breach, the agency announced Friday.

Investigators believe the stolen data—primarily configuration and user information from Valtori’s mobile device management system—could be combined in ways that “may affect Finland’s security and cause it harm,” according to detective chief inspector Aku Limnell.

The breach, first detected on January 29, initially targeted Valtori’s mobile administration services, which manage devices for roughly 50,000 state employees. Police have not disclosed suspects or motives, as the pre-trial investigation remains ongoing.

Authorities continue to analyze the scope of the compromised data and the sequence of events leading to the intrusion. The case marks the first time Finnish officials have publicly linked a state cyber incident to potential espionage.