Shivangi Sinha
Cybersecurity threats and hackers pose severe risks, and they often leave victims to deal with stolen data and financial losses. These crimes can shatter lives, businesses, and even national security. HBO Max’s ‘Most Wanted: Teen Hacker’ delves into the alarming case of Julius Kivimäki, one of the most infamous hackers in modern history. His crimes spanned borders and it shed light on how vulnerable digital systems can be to international cyberattacks. The documentary also features interviews with Kivimäki himself, who gives an insight into his mindset and the scope of his actions.
Julius Kivimäki Was a Part of Online Hacking Circles Since He Was a Teenager
Julius Aleksanteri Tomminpoika Kivimäki, also known as Aleksanteri Tomminpoika Kivimäki, was born on August 22, 1997, in the Helsinki suburb of Espoo, Finland. Like many from his generation, he spent much of his childhood online, initially exploring obscure internet communities before being drawn into hacker circles. By age 13, he had joined groups such as HTP (Hack the Planet) and the notorious Lizard Squad, which began his involvement in cybercrime. Kivimäki later claimed he played only a minor role and called himself a “waterboy.” In early 2014, while he was visiting Las Vegas with his parents, the FBI executed a search warrant linked to his online activities.
Kivimäki’s electronic devices were seized during the FBI search, and his parents were confronted, but because he was only 15 at the time. No charges were filed, and he returned to Finland. Soon after, on August 24, 2014, he caused chaos by issuing a fake security threat against an American Airlines flight from Dallas to San Diego. The plane was diverted, and fighter jets were scrambled after he used a passenger’s personal information to make the false claim. That same year, he allegedly made several false emergency calls, including SWAT raids on private homes in the US. One allegedly targeted the FBI agent who had questioned him in Las Vegas. Finnish authorities also launched their own investigation and later seized his electronics in a raid at his home in late 2014.
Julius Kivimäki Was Involved in the Infamous Hacking Case of Vastaamo
Julius Kivimäki soon faced numerous cybercrime-related charges and was kept in jail for about a month. Before he was convicted, as a member of Lizard Squad, he played a major role in taking down PlayStation Network and Xbox Live on Christmas Eve and Christmas Day, disrupting millions of users worldwide. He even allegedly hacked into Elon Musk’s X (formerly Twitter) account to get back at his online rival. He even gave a Sky News interview and showed little remorse for his crimes. In July 2015, at the District Court of Espoo, Finland, he pleaded guilty to 50,700 cybercrime-related offenses, including aggravated computer break-ins. Because he was a minor, he received only a two-year suspended sentence. The ruling drew widespread criticism in the media.
For a few years after his suspended sentence, Kivimäki kept a relatively low profile, with only minor alleged offenses linked to him. However, in 2020, he orchestrated one of Finland’s most shocking cybercrimes by breaching the databases of Vastaamo, which is a major psychotherapy clinic. He stole the personal data of about 33,000 patients and first demanded a ransom from the company. When refused, he began blackmailing patients directly, asking for €200 within 24 hours or increasing it to €500. Roughly 20 victims paid before realizing their data had already been leaked on the dark web. Cybersecurity experts soon traced the attack back to Kivimäki.
Julius Kivimäki is Behind Bars Today
Police spent years trying to build a solid case, and in 2022, an Interpol Red Notice was finally issued for Julius Kivimäki. His whereabouts remained unclear until February 2023, when French police responded to what appeared to be a routine domestic disturbance call in Paris. Instead, they discovered Kivimäki living under a false name and identity. At the time of his arrest, he also held permanent residency in London and had reportedly lived a lavish lifestyle in Saint-Tropez, France. He was extradited to Finland, where his trial officially began in April 2024.
The trial drew massive public attention, especially when Kivimäki chose to testify in his own defense. He denied involvement in the crimes and even made light-hearted jokes while on the stand, but the weight of the evidence left little doubt. Ultimately, he was convicted of more than 30,000 offenses, including aggravated data breach, attempted aggravated blackmail, over 9,000 counts of disseminating private information, and more than 20,000 counts of attempted aggravated blackmail. He received a six-year, three-month sentence and is currently housed in Turku Prison, a maximum-security facility in Finland. Though he is expected to serve only about half his term, he is serving the time for his crimes.
