Finnish security service attributes cyberattack against the Parliament to a Chinese state-affiliated group

On March 18, 2021, the Finnish intelligence services (Supo) publicly announced that the APT31 group was behind a 2020 cyber espionage operation aimed at the Finnish Parliament. The cyber intrusion had been reported in December 2020 but had been spotted several weeks earlier. As a result of the attack, the security of a number of parliamentary email accounts was compromised, some of which belonged to MPs. In its March 2021 announcement, Supo stated that the cyber attack had been “state-run.” While Finnish intelligence did not mention China by name, several cybersecurity firms have linked APT31 to the Chinese government.

About This Incident

Threat Actors: China

Incident Metadata

Date: December 2020 - March 2021
Country: Finland