Finnish intelligence warns of persistent cyber espionage from Russia and China targeting Finland's technology, research, and government sectors

The Finnish Security and Intelligence Service (SUPO) issued a comprehensive assessment detailing ongoing cyberespionage, traditional espionage, and influence campaigns by Russian and Chinese state-backed actors targeting Finland. Attacks focus on government networks, research institutions, and advanced technology firms. Key past incidents include the 2020 psychotherapy provider Vastaamo hack exposing sensitive patient data, and a serious cyber intrusion on parliamentary IT systems attributed to Chinese APT31. The report notes that Russia’s intelligence capabilities in Europe weakened after widespread expulsions of Russian diplomats, prompting greater reliance on cyber operations and political influence to achieve objectives. Additionally, GPS interference reported in northern Finland and Norway is linked to Russian military systems on the Kola Peninsula. SUPO stresses these state-sponsored operations constitute Finland’s principal security threat and predicts their persistence as Finland integrates deeper with Western security and technology frameworks following its 2023 NATO membership.