Valio Data Breach Exposes Thousands Of Personal Records

[swidup]

https://evrimagaci.org/tpg/valio-data-breach-exposes-thousands-of-personal-records-101007#google_vignette

"Cyber attack raises alarms over data security as over 5,000 individuals are affected.
Valio, the Finnish dairy giant, has fallen victim to a significant cyber attack, potentially impacting the personal data of over 5,000 individuals, including employees and cooperative staff. The breach, which came to light on December 12, 2022, has raised serious concerns about the adequacy of data protection measures within large corporations and their reliance on third-party service providers.

According to company officials, the cyber attack involved unauthorized access gained through the credentials of Valio's IT service provider, Vincit. The exposed information includes names, personal identity numbers, salary details, and bank account information of Valio employees and staff from milk procurement cooperatives. What's more alarming is the possible compromise of sensitive details related to Valio's mutual insurance company and pension fund, which affects about 1,000 individuals, including beneficiaries of health-related financial programs.

Upon confirming the attack, Valio reported the incident to law enforcement and to Finland's data protection authority, alongside the Finnish Transport and Communications Agency (Traficom). Despite their efforts, Valio's Chief Legal Officer Juha Hölttä expressed deep concern about the breach during an interview with Yle. "We are deeply worried and have prioritized informing our employees. Determining the full scope will take time," Hölttä stated.

The cyber attack was initially thought to be ransomware aimed at disrupting business operations. Yet, as investigations progressed, it became clear the attackers accessed sensitive files instead. Hölttä pointed out the challenges of fully grasping the extent of the stolen data due to encryption methods utilized by the assailants, highlighting how negligence during data transitions, such as mergers or expansions, can lead to such vulnerabilities.

The attack, described by industry experts as "uncomfortably large," is indicative of rising cyber threats faced by organizations both globally and within Finland. Janne Allonen, head of the National Cyber Security Centre, remarked on the increasing frequency of such breaches, noting the unfortunate trend as companies often overlook security measures during significant operational changes. Alexander emphasized, "these are complex processes where cybersecurity can occasionally fall by the wayside."

The potentially severe repercussions of the breach, especially concerning identity theft, cannot be overstated. Individuals whose data was compromised are now at risk of identity fraud, which can lead to financial loss and significant emotional distress. Valio has encouraged affected individuals to take preventive measures like applying for credit freezes or placing restrictions on sharing personal information to mitigate risks."

[swidup]

https://yle.fi/a/74-20133008