Loading signal...
Signal
Submitted
Mar 12, 2026, 15:37 UTC
On March 10, 2026, Finnish intelligence warned of persistent cyber espionage and influence operations from Russian and Chinese intelligence targeting Finland’s government, research, and technology sectors.
The Finnish Security and Intelligence Service (SUPO) issued a comprehensive assessment detailing ongoing cyberespionage, traditional espionage, and influence campaigns by Russian and Chinese state-backed actors targeting Finland. Attacks focus on government networks, research institutions, and advanced technology firms. Key past incidents include the 2020 psychotherapy provider Vastaamo hack exposing sensitive patient data, and a serious cyber intrusion on parliamentary IT systems attributed to Chinese APT31. The report notes that Russia’s intelligence capabilities in Europe weakened after widespread expulsions of Russian diplomats, prompting greater reliance on cyber operations and political influence to achieve objectives. Additionally, GPS interference reported in northern Finland and Norway is linked to Russian military systems on the Kola Peninsula. SUPO stresses these state-sponsored operations constitute Finland’s principal security threat and predicts their persistence as Finland integrates deeper with Western security and technology frameworks following its 2023 NATO membership.
Confidence: High
The article explicitly states Russian and Chinese intelligence services conducting cyberespionage and influence campaigns against Finland with concrete past incidents and ongoing assessment by Finnish security agency SUPO.
Source URL
https://therecord.media/finnish-intel-warns-espionage-china-russia
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "64883421-360d-41da-92a8-6ef33e6b6a50",
"url": "https://therecord.media/finnish-intel-warns-espionage-china-russia",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Finland",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"offensive cyber operations",
"Russia",
"China",
"Finland",
"SUPO",
"APT31",
"influence operations",
"NATO accession",
"cyber intrusion",
"gnss interference",
"hybrid warfare"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Finland"
],
"where_text": "Cyberspace",
"headline": "Finnish intelligence warns of persistent cyber espionage from Russia and China targeting Finland's technology, research, and government sectors",
"description": "On March 10, 2026, Finland's Security and Intelligence Service (SUPO) released a national security assessment warning about extensive cyberespionage and influence operations by Russian and Chinese intelligence services. The report highlights continuous cyber intrusions targeting government systems, research institutions, and companies in advanced technologies, with no expectation that these threats will subside. Notable incidents include the 2020 Vastaamo psychotherapy provider hack and a parliament cyber intrusion linked to China's APT31 group. SUPO emphasized that foreign intelligence activities combine cyber operations, traditional espionage, and political influence campaigns intended to gather sensitive information and shape public opinion. The report also notes increased intelligence pressure following Finland's NATO accession in 2023 and hybrid disruptions such as GPS interference attributed to Russian military systems. SUPO said these state-sponsored intelligence activities remain Finland’s principal threat and will persist as the country deepens integration with Western security networks.",
"summary_short": "On March 10, 2026, Finnish intelligence warned of persistent cyber espionage and influence operations from Russian and Chinese intelligence targeting Finland’s government, research, and technology sectors.",
"summary_extended": "The Finnish Security and Intelligence Service (SUPO) issued a comprehensive assessment detailing ongoing cyberespionage, traditional espionage, and influence campaigns by Russian and Chinese state-backed actors targeting Finland. Attacks focus on government networks, research institutions, and advanced technology firms. Key past incidents include the 2020 psychotherapy provider Vastaamo hack exposing sensitive patient data, and a serious cyber intrusion on parliamentary IT systems attributed to Chinese APT31. The report notes that Russia’s intelligence capabilities in Europe weakened after widespread expulsions of Russian diplomats, prompting greater reliance on cyber operations and political influence to achieve objectives. Additionally, GPS interference reported in northern Finland and Norway is linked to Russian military systems on the Kola Peninsula. SUPO stresses these state-sponsored operations constitute Finland’s principal security threat and predicts their persistence as Finland integrates deeper with Western security and technology frameworks following its 2023 NATO membership.",
"actor_primary": "Russian intelligence services",
"target_primary": null,
"location_text": "Finland",
"location_region": null,
"location_coordinates_lat": 61.92411,
"location_coordinates_lon": 25.748151,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly states Russian and Chinese intelligence services conducting cyberespionage and influence campaigns against Finland with concrete past incidents and ongoing assessment by Finnish security agency SUPO.",
"event_time_utc": "2026-03-10T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-03-12T15:37:00.039Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Mar 10, 2026, 00:00 UTC
Event time confidence
exact
Location
Finland
Primary actor
Russian intelligence services
Country
Finland
Countries
Finland
Tags
offensive cyber operations, Russia, China, Finland, SUPO, APT31, influence operations, NATO accession, cyber intrusion, gnss interference, hybrid warfare
Nodes
Node 1: Borders, Node 2: 5th Column
Signal
Submitted
Mar 12, 2026, 15:37 UTC
On March 10, 2026, Finnish intelligence warned of persistent cyber espionage and influence operations from Russian and Chinese intelligence targeting Finland’s government, research, and technology sectors.
The Finnish Security and Intelligence Service (SUPO) issued a comprehensive assessment detailing ongoing cyberespionage, traditional espionage, and influence campaigns by Russian and Chinese state-backed actors targeting Finland. Attacks focus on government networks, research institutions, and advanced technology firms. Key past incidents include the 2020 psychotherapy provider Vastaamo hack exposing sensitive patient data, and a serious cyber intrusion on parliamentary IT systems attributed to Chinese APT31. The report notes that Russia’s intelligence capabilities in Europe weakened after widespread expulsions of Russian diplomats, prompting greater reliance on cyber operations and political influence to achieve objectives. Additionally, GPS interference reported in northern Finland and Norway is linked to Russian military systems on the Kola Peninsula. SUPO stresses these state-sponsored operations constitute Finland’s principal security threat and predicts their persistence as Finland integrates deeper with Western security and technology frameworks following its 2023 NATO membership.
Confidence: High
The article explicitly states Russian and Chinese intelligence services conducting cyberespionage and influence campaigns against Finland with concrete past incidents and ongoing assessment by Finnish security agency SUPO.
Source URL
https://therecord.media/finnish-intel-warns-espionage-china-russia
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "64883421-360d-41da-92a8-6ef33e6b6a50",
"url": "https://therecord.media/finnish-intel-warns-espionage-china-russia",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Finland",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"offensive cyber operations",
"Russia",
"China",
"Finland",
"SUPO",
"APT31",
"influence operations",
"NATO accession",
"cyber intrusion",
"gnss interference",
"hybrid warfare"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Finland"
],
"where_text": "Cyberspace",
"headline": "Finnish intelligence warns of persistent cyber espionage from Russia and China targeting Finland's technology, research, and government sectors",
"description": "On March 10, 2026, Finland's Security and Intelligence Service (SUPO) released a national security assessment warning about extensive cyberespionage and influence operations by Russian and Chinese intelligence services. The report highlights continuous cyber intrusions targeting government systems, research institutions, and companies in advanced technologies, with no expectation that these threats will subside. Notable incidents include the 2020 Vastaamo psychotherapy provider hack and a parliament cyber intrusion linked to China's APT31 group. SUPO emphasized that foreign intelligence activities combine cyber operations, traditional espionage, and political influence campaigns intended to gather sensitive information and shape public opinion. The report also notes increased intelligence pressure following Finland's NATO accession in 2023 and hybrid disruptions such as GPS interference attributed to Russian military systems. SUPO said these state-sponsored intelligence activities remain Finland’s principal threat and will persist as the country deepens integration with Western security networks.",
"summary_short": "On March 10, 2026, Finnish intelligence warned of persistent cyber espionage and influence operations from Russian and Chinese intelligence targeting Finland’s government, research, and technology sectors.",
"summary_extended": "The Finnish Security and Intelligence Service (SUPO) issued a comprehensive assessment detailing ongoing cyberespionage, traditional espionage, and influence campaigns by Russian and Chinese state-backed actors targeting Finland. Attacks focus on government networks, research institutions, and advanced technology firms. Key past incidents include the 2020 psychotherapy provider Vastaamo hack exposing sensitive patient data, and a serious cyber intrusion on parliamentary IT systems attributed to Chinese APT31. The report notes that Russia’s intelligence capabilities in Europe weakened after widespread expulsions of Russian diplomats, prompting greater reliance on cyber operations and political influence to achieve objectives. Additionally, GPS interference reported in northern Finland and Norway is linked to Russian military systems on the Kola Peninsula. SUPO stresses these state-sponsored operations constitute Finland’s principal security threat and predicts their persistence as Finland integrates deeper with Western security and technology frameworks following its 2023 NATO membership.",
"actor_primary": "Russian intelligence services",
"target_primary": null,
"location_text": "Finland",
"location_region": null,
"location_coordinates_lat": 61.92411,
"location_coordinates_lon": 25.748151,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly states Russian and Chinese intelligence services conducting cyberespionage and influence campaigns against Finland with concrete past incidents and ongoing assessment by Finnish security agency SUPO.",
"event_time_utc": "2026-03-10T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-03-12T15:37:00.039Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Mar 10, 2026, 00:00 UTC
Event time confidence
exact
Location
Finland
Primary actor
Russian intelligence services
Country
Finland
Countries
Finland
Tags
offensive cyber operations, Russia, China, Finland, SUPO, APT31, influence operations, NATO accession, cyber intrusion, gnss interference, hybrid warfare
Nodes
Node 1: Borders, Node 2: 5th Column