Finnish state data breach linked to defence forces and presidential office

A major data breach at Valtori, Finland’s state IT agency, has affected several security authorities, including the Defence Forces and the Office of the President, according to documents obtained by national broadcaster Yle.

The breach, first reported in February, involved a mobile service used across government agencies. While Valtori has stated that classified security network data was not compromised, leaked documents reveal that personal details, location data, and device software information were exposed.

Among the affected agencies, the Finnish Border Guard (Tulli) estimates over 50 employees were impacted, while the National Police Board reports 16–30 cases. The Defence Forces’ exposure remains partially redacted in the documents. The Office of the President also confirmed more than 50 individuals were affected.

Valtori has declined to comment on specific agencies but maintains that no sensitive security network data was leaked. The National Bureau of Investigation (KRP) is probing the incident as suspected espionage and aggravated data breach, with the preliminary investigation ongoing.

Around 50,000 users were impacted by the breach, though not all government agencies were affected. The case remains under investigation, with no suspect identified.