Julius Kivimäki, known in the cyber realm as “Zeekill,” embarked on a path of cyber delinquency at the tender age of 13. Born in Finland, Kivimäki’s early fascination with computers and programming quickly morphed into a series of illicit activities that would eventually position him among Europe’s most notorious cybercriminals.
Early Ventures into Cybercrime
Between 2009 and 2015, Kivimäki was implicated in numerous cyberattacks that targeted a diverse array of entities. His activities ranged from disrupting online gaming networks to infiltrating governmental and corporate systems. These early exploits not only showcased his technical prowess but also his audacity in challenging established digital infrastructures.
The Vastaamo Psychotherapy Center Breach
In 2020, amid the global upheaval caused by the COVID-19 pandemic, Kivimäki executed one of the most egregious cyberattacks in Finnish history. He infiltrated the databases of Vastaamo, Finland’s largest psychotherapy center, exfiltrating sensitive records of approximately 33,000 patients. The compromised data included personal identification details and confidential therapy session notes, some involving minors.
Extortion Attempts and Public Unrest
Kivimäki initially demanded €400,000 from Vastaamo to prevent the dissemination of the stolen data. Upon the organization’s refusal, he resorted to directly blackmailing individual patients. Adopting the alias “ransom_man,” he threatened to publish their private information unless they paid €200 within 24 hours, escalating to €500 if the initial deadline was missed. This tactic instilled widespread fear and distress among the victims, leading to a national outcry.
Investigation and Apprehension
The breach prompted one of Finland’s most extensive criminal investigations. Authorities collaborated with cybersecurity experts to trace the origins of the attack. Kivimäki’s inadvertent leak of the entire database on a darknet forum, coupled with meticulous digital forensics and cryptocurrency tracking, facilitated his identification and subsequent arrest.
Legal Proceedings and Sentencing
In April 2024, the Western Uusimaa District Court sentenced Kivimäki to six years and three months in prison. This case set a record for the highest number of victims in Finland’s criminal history. Despite the severity of his crimes, some victims felt the sentence was insufficient, given the profound and lasting impact on their lives.
Reflections on Cybersecurity
Kivimäki’s trajectory from a teenage hacker to one of Europe’s most wanted criminals underscores the escalating threats in the digital landscape. His actions highlight the imperative for robust cybersecurity measures and the need for organizations to safeguard sensitive information against increasingly sophisticated cyber threats.
