What should I do?

My personal data has been stolen or leaked

To get the best help for your situation, first answer the questions on the Preliminary questions page.

Make the necessary blocks

Protect yourself from any misuse

Once your personal data has been leaked online or ended up in criminal hands, it may be used to commit identity theft or fraud.

However, you can prevent abuse yourself by means of blocks. Consider prohibitions especially when your personal identity code is leaked.

Updated: 14/6/2021

Consider taking out a credit ban

You can place a self-imposed credit ban in the Tax Administration's Positive credit register. The Tax Administration's service is free of charge. In the Positive credit register you can give consent that information on your voluntary ban on credits may be disclosed to credit information companies.

Two companies offer voluntary credit bans as a paid service:

By enacting a self-imposed credit ban, you will make it more difficult for others to use your personal data to

order a credit card
take out a bank loan
make purchases on an instalment plan.

However, you can still take out a loan yourself by presenting the credit ban certificate. You can also cancel your credit ban at a later date.

Suomen Asiakastieto and Bisnode also offer supervision services that notify you if someone tries to apply for credit with your information.

If you cannot afford to pay for a credit ban, find out whether you are eligible for basic social assistance.

Updated: 16/4/2024

Submit a contact information disclosure ban

When you prohibit the disclosure of your contact information from various registers, you will prevent any third parties from obtaining your information from any address and contact information services.

Non-disclosure of contact details with the Digital and Population Data Services Agency

Identify yourself and submit a disclosure ban to the Digital and Population Data Services Agency

When you prohibit the disclosure of your contact information, your contact information is not disclosed from the Population Information System to any address or contact information services. This also prevents criminals from getting your information. The disadvantage is that no one else can find your contact information from address and contact services either.

However, your data will still be disclosed to your bank or insurance company in debt recovery matters, estate inventory invitations, or for other statutory obligations.

File an address information disclosure ban with your teleoperators

DNA: DNA’s Minun palveluni self-service (available in Finnish)Opens in a new window., the Oma DNA app’s messaging service, DNA’s customer serviceOpens in a new window..
Elisa: OmaElisaOpens in a new window., Elisa’s customer serviceOpens in a new window..
Telia: Telia’s services (page available in Finnish)Opens in a new window..

If you want to remove your address information from all directory services, you will need to submit an address information disclosure ban to your teleoperator. This also prevents criminals from getting your information. The disadvantage is that no one else can find your contact information from contact services either.

You can also ask your operator to demand the presentation of an identification document before any changes can be made to your information.

Block notification of change of address

You should prevent the submission of any change of address notifications to the Digital and Population Data Services Agency’s Population Information System and Posti, the Finnish postal service. Block both. When you have a valid block, no one can make a change of address in your name.

Block a notification of move with the Digital and Population Data Services Agency

Identify yourself and submit a block to the Digital and Population Data Services Agency

Moving Protection and Light Moving Protection with Posti

Posti: Moving Protection and Light Moving Protection.

The Light Moving Protection plan is recommended for those whose personal data has been stolen. You can submit a change of address electronically even if you have a valid Light Moving Protection.

It is recommended to put a Moving Protection in place if your personal data and your bank ID, mobile certificate or ID card have been stolen. If you have a valid Moving Protection, the change of address will not take effect until you have been contacted by phone and you have verified your identity.

Prohibit registration in PRH registers

When you submit a prohibition of registration to the Finnish Patent and Registration Office, any would-be criminals will not be able to appoint you as a responsible person in a company, association or foundation. The responsible persons of the company include the members of the board of directors.

A registration ban may be a disadvantage if you are an entrepreneur, for example an auditor.

You can still be appointed as a responsible person even after your registration ban but in this case, PRH will always ask for your consent separately.