Cyber attack response continues at Pajulahti: instructions for protecting your personal data
A cybersecurity attack was carried out on September 13 at 10:24 PM on the old server room of the Pajulahti campus, which is part of the Three Campuses Sports Institute, and it still partially affects the campus operations. Reports of the attack were made to the authorities immediately after the observations, and corrective actions are ongoing.
We have been investigating the scope of the incident in close cooperation with cybersecurity experts. In light of the latest findings, the attacker may have gained access to material containing the employment contract details of about 150 people. It may also contain the details of about 850 people who had completed a vocational qualification in coaching by 2015. In total, this concerns about one thousand people, a significant share of whom probably live in the Nastola and Lahti area.
An employment contract typically contains a name and personal identity number, an address and contact details as of the time the contract was made, salary and job information, bank account details if they were entered in the contract, and other information related to the employment. However, no passwords, online banking credentials or system login details have leaked from our systems.
The old server room was due to be shut down by 2027. The vulnerability has now been closed, and the environment has been isolated and secured. Notifications have been made to the Office of the Data Protection Ombudsman and to the National Cyber Security Centre Finland at Traficom, and a criminal complaint has been filed with the police.
How to protect your personal data
Voluntary credit ban: You can place a voluntary credit ban on yourself (for example via Suomi.fi > For citizens > Security, or the Positive Credit Register). It prevents anyone from applying for credit in your name if your personal identity number ends up in the wrong hands.
Be alert to scam messages: If you receive unusual contacts, emails or text messages that ask for online banking credentials or passwords, or that request payments, do not respond to them.
Suomi.fi registration ban: You can check your own information in the Suomi.fi service and, if necessary, prohibit the disclosure of your address information.
Additional information and support
If you have questions about the incident or the handling of your data, you can contact Data Protection Officer Irina Keinänen at irina.keinanen@kolmekampusta.fi.
We apologize for the concern and inconvenience this causes. We take data protection very seriously and will do everything we can to prevent similar situations in the future.
Further information:
Irina Keinänen, 0400 633 989, irina.keinanen@kolmekampusta.fi
Petri Tarkkanen, 040 843 7300, petri.tarkkanen@kolmekampusta.fi
Three-Campuses Sports Institute
Kolmen kampuksen urheiluopisto (Three-Campus Sports Institute) is Finland's largest provider of vocational education in the sports and physical activity sector, and a national sports training centre operating on three campuses: Kisakallio in Lohja, Pajulahti in Nastola, and Mäkelänrinne in Helsinki. It is Finland's only Olympic and Paralympic training centre. The institute also offers leisure services for private customers and services for companies. In addition, it organizes several national and international sports events every year.
https://www.kolmekampusta.fi