Some Kela client data may have been exposed to outsiders due to a system malfunction at Aktia Bank – The affected clients have been contacted by Kela | KelaSkip to content
Press release

Some Kela client data may have been exposed to outsiders due to a system malfunction at Aktia Bank – The affected clients have been contacted by Kela

Published 12/4/2023

Due to a technical problem at Aktia Bank in January, some Kela client data may have been exposed to outsiders. The issue affected about 60 Kela clients who signed in to Kela or Kanta services on the morning of Tuesday, 24 January 2023. Kela has contacted all affected customers personally.

Aktia Bank experienced a technical problem between 9 am and 10 am on 24 January 2023, which also impacted some Kela clients. Before the issue was fixed, data on some Aktia clients may have been accessible by other clients using their Aktia online banking codes to sign in to a government service. Because Aktia banking codes can also be used to sign in to Kela and Kanta services requiring strong authentication, Kela was involved in the efforts to discover how the problem affected its own clients.

The investigation found that data on about 60 Kela clients who signed in to OmaKela or MyKanta or Kela’s services for institutional clients may have been exposed to outsiders. Kela has contacted all affected clients personally,  advising them how to find out more about their personal situation. Soon after the problem was discovered, Aktia Bank was in contact with all affected clients.

Aktia has fixed the problem, and the described issue will no longer occur. Any clients who suspect that their personal data may have fallen into the wrong hands can find more infor-mation at www.suomi.fi/guides/data-leak

Director Nina Nissilä of Kela says that because Kela understands the concern the situation may cause for its clients, Kela has made sure to investigate the situation thoroughly. “Kela’s internal investigations to date have not discovered any misuse of our clients’ personal data that can be traced back to the discovered problem. The security of our clients’ data is absolutely essential to us”, Nissilä says.

Kela has notified the Office of the Data Protection Ombudsman of the breach and is cooperating in the investigation.

Last modified 12/4/2023