Information security incident in the ProConsona client information system, no data has been accessed by unauthorised parties

An information security incident has been detected in the ProConsona client information system, in which old attachment files related to social welfare clients in Lohja were destroyed during a server migration. The missing files consist of attachments to documents related to income security, child welfare, and adult and family services, such as statements, receipts and various certificates. The destroyed attachments were saved in the system between 2010 and 2022, which is why most of the missing data no longer has any impact on potential current client relationships or related client processes. Client documents related to the client relationships—such as plans and decisions—are intact and properly stored.

The attachments have been permanently destroyed and cannot be restored. The files have not fallen into the hands of unauthorised parties, nor is there a risk of unauthorised use.

A notification of the incident has been submitted to the Office of the Data Protection Ombudsman, and to the Finnish Supervisory Agency. Based on the current assessment, the incident does not cause any harm to clients. We apologise for the incident.  

The attachments were destroyed during the wellbeing services county’s first years in 2023–2024 when ProConsona client information systems, which were transferred from municipalities to the wellbeing services county as part of a transfer of undertaking, were consolidated into a single client information system, and changes were made to its server environment. As modifications were carried out on several occasions, the exact time of the incident has not been identified. The system provider informed the wellbeing services county about the suspected destruction of the attachments in autumn 2025. Ever since, the wellbeing services county has been investigating the incident together with the system provider. 

This notice does not require any action from the data subject. If needed, further information is provided by customer service tel. 029 151 2000 or info@luvn.fi   or, in questions related to information security, by a data protection officer at tietosuoja@luvn.fi. 

Instructions by the Office of the Data Protection Ombudsman to those affected by a personal data breach: Have you been affected by a personal data breach? | Office of the Data Protection Ombudsman(external link)

More information:

Saara Kontro, +358405091876