GCVE-110-CERTFI-2018-0003

In the spring of 2018, emails for employees and directors of several Finnish companies have been stolen and their credentials have been used in several cases of fraud and attempts of fraud. On the basis of notifications to the NCSC-FI, they have caused substantial losses and expenses to many Finnish companies. The NCSC-FI recommends that company directors allocate sufficient resources for the technical prevention and detection of frauds and data breaches and for the information to the employees about the threats.