If it happens to you: help with data breaches and security incidents

Data breaches and security incidents can have serious personal and financial consequences. They can also reduce your sense of safety and cause emotional stress. This guide explains what to do if you become a victim of such an incident.

Act quickly and systematically. The situation may feel overwhelming, but help is available — you are not alone.
📩 Create a support ticket 📞 Call the helpdesk 🛡️Report a crime (Police)✉️ Email support

Becoming a victim of a data breach or security incident

1. Report immediately
   • Contact the IT support or security team of the service provider, especially if the issue occurred outside your university. Within the university, contact the Helpdesk to limit the damage and get instructions for next steps.
     • If a crime has occurred, contact the police and report it so that those responsible can be held accountable.
2. File a crime report to the police
3. Contact other relevant parties:
   • Banks: Report any possible unauthorized access to your bank accounts.
   • Victim Support Finland: Offers support and guidance to victims.
   • Tax Administration: If your information has been misused in tax matters, contact the tax authority. You can restrict account changes by logging in to OmaVero.
   • National Cyber Security Center: Offers instructions and support for cybersecurity matters.
   • Data Protection Ombudsman: Report unauthorized use of your personal data to the data protection authority.

Practical follow-up actions

1. Minimize damage and monitor activity:
   • Change passwords for all your services.
   • Set credit or address change bans if necessary.
   • Monitor bank statements and report suspicious activity to your card provider.
   • Use multi-factor authentication wherever possible.
2. Communicate openly about the incident:
   • Inform people close to you and your employer if needed. This helps prevent further scams or fraud.
3. Stay up to date on how to protect yourself:
   • Learn to recognize phishing messages and be careful with unknown contacts.

Helpful information for an incident report

• Subject: Data breach/Security Incident – [short description]
• What happened:
• When (date and time):
• Accounts/services affected:
• Device and location (e.g., phone/laptop; home/office):
• Actions already taken: Attachments (screenshots or notices received):

Did You Encounter a Problem?

Suomeksi: Mitä jos olen tietosuoja- ja tietoturvapoikkeaman kohteena?